codeam-cli 2.53.3 → 2.53.4

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.53.3] — 2026-07-06
+
+### Fixed
+
+- Phase 0 hygiene — 8 verified bugs across cli/shared/vsc/jetbrains
+
 ## [2.53.2] — 2026-07-06
 
 ### Fixed

package/dist/index.js

@@ -199,6 +199,20 @@ function renderToLines(raw) {
   return screen;
 }
 
+// ../../packages/shared/src/protocol/remote-command.ts
+var import_zod = require("zod");
+var remoteCommandSchema = import_zod.z.object({
+  id: import_zod.z.string(),
+  sessionId: import_zod.z.string(),
+  pluginId: import_zod.z.string(),
+  type: import_zod.z.string(),
+  // The backend may omit `payload` (or send null) for payload-less commands;
+  // clients have always normalized that to `{}` — keep that behavior here.
+  payload: import_zod.z.record(import_zod.z.string(), import_zod.z.unknown()).nullish(),
+  status: import_zod.z.string(),
+  createdAt: import_zod.z.number()
+});
+
 // ../../packages/shared/src/models/pricing.ts
 var MODEL_PRICING = {
   // ── Anthropic / Claude ────────────────────────────────────
@@ -276,8 +290,12 @@ var AGENT_REGISTRY = {
     displayName: "Claude Code",
     binaryName: "claude",
     enabled: true,
-    supportedAuthKinds: ["oauth_token", "api_key"],
-    preferredAuthKind: "oauth_token"
+    // Mirrors the backend registry (codeagent-mobile
+    // apps/api-v2/src/codespaces/agent.ts — authoritative for auth
+    // capabilities). `setup_token` is the bare `sk-ant-oat01-…` from
+    // `claude setup-token` → delivered via CLAUDE_CODE_OAUTH_TOKEN.
+    supportedAuthKinds: ["setup_token", "oauth_token", "api_key"],
+    preferredAuthKind: "setup_token"
   },
   codex: {
     id: "codex",
@@ -300,15 +318,22 @@ var AGENT_REGISTRY = {
     displayName: "CodeRabbit",
     binaryName: "coderabbit",
     enabled: true,
-    supportedAuthKinds: ["oauth_token", "api_key"],
-    preferredAuthKind: "oauth_token"
+    // Backend registry is authoritative: CodeRabbit links via a real
+    // API key only (no OAuth flow exists in api-v2).
+    supportedAuthKinds: ["api_key"],
+    preferredAuthKind: "api_key"
   },
   cursor: {
     id: "cursor",
     displayName: "Cursor Agent",
     binaryName: "cursor-agent",
     enabled: true,
-    supportedAuthKinds: ["oauth_token", "api_key"],
+    // Backend registry is authoritative: since the Cursor OAuth
+    // device-flow shipped, new links are oauth_token only (the login
+    // blob written to ~/.config/cursor/auth.json). Legacy vaulted
+    // api_key rows may still exist server-side, but the link surface
+    // no longer offers api_key.
+    supportedAuthKinds: ["oauth_token"],
     preferredAuthKind: "oauth_token"
   },
   aider: {
@@ -344,7 +369,7 @@ function getAgent(id) {
   return meta;
 }
 function isKnownAgentId(id) {
-  return id === "claude" || id === "codex" || id === "copilot" || id === "coderabbit" || id === "cursor" || id === "aider" || id === "gemini";
+  return id in AGENT_REGISTRY;
 }
 
 // ../../packages/shared/src/api-url.ts
@@ -359,6 +384,74 @@ function resolveApiBaseUrl() {
   return DEFAULT_API_BASE_URL;
 }
 
+// ../../packages/shared/src/types/events.ts
+var USER_EVENTS = {
+  PAIRED_SESSION_STATUS: "paired_session_status",
+  PAIRED_SESSION_ADDED: "paired_session_added",
+  PAIRED_SESSION_REMOVED: "paired_session_removed",
+  PAIRED_SESSION_BRANCH_CHANGED: "paired_session_branch_changed",
+  SHARED_WITH_ME_ADDED: "shared_with_me_added",
+  SHARED_WITH_ME_REVOKED: "shared_with_me_revoked",
+  USAGE_CHANGED: "usage_changed",
+  TASK_DONE: "task_done",
+  HUNK_PENDING_REVIEW_ADDED: "hunk_pending_review_added",
+  HUNK_REVIEW_RESOLVED: "hunk_review_resolved",
+  FILE_CHANGED: "file_changed",
+  FILES_BATCH_CHANGED: "files_batch_changed",
+  AGENT_STREAMING_CHUNK: "agent_streaming_chunk",
+  AGENT_AWAITING_ANSWER: "agent_awaiting_answer",
+  AWAITING_INPUT_ADDED: "awaiting_input_added",
+  AGENT_ANSWER_RESOLVED: "agent_answer_resolved",
+  TEMPLATE_ADDED: "template_added",
+  TEMPLATE_REMOVED: "template_removed",
+  TEMPLATE_UPDATED: "template_updated",
+  AGENT_TASK_DISPATCHED: "agent_task_dispatched",
+  AGENT_TASK_COMPLETED: "agent_task_completed",
+  LINKED_AGENT_ADDED: "linked_agent_added",
+  QUOTA_REACHED: "quota_reached",
+  LINKED_AGENT_LINK_FAILED: "linked_agent_link_failed",
+  CODESPACE_AGENT_INSTALLED: "codespace_agent_installed",
+  AGENT_CREDENTIALS_REFRESHED: "agent_credentials_refreshed",
+  CREDENTIAL_INVALID: "credential_invalid",
+  CODESPACE_WAKING: "codespace_waking",
+  CODESPACE_BILLING_BLOCKED: "codespace_billing_blocked",
+  COST_SAVING_UPDATED: "cost_saving_updated",
+  COMMAND_COMPLETED: "command_completed",
+  AI_SUMMARY_PENDING: "ai_summary_pending",
+  AI_SUMMARY_READY: "ai_summary_ready",
+  AI_INSIGHT_PENDING: "ai_insight_pending",
+  AI_INSIGHT_READY: "ai_insight_ready",
+  PUSH_TOKEN_INVALIDATED: "push_token_invalidated",
+  PREVIEW_DETECTION_PENDING: "preview_detection_pending",
+  PREVIEW_DETECTION_READY: "preview_detection_ready",
+  PREVIEW_STARTING: "preview_starting",
+  PREVIEW_READY: "preview_ready",
+  PREVIEW_STOPPED: "preview_stopped",
+  PREVIEW_ERROR: "preview_error",
+  PREVIEW_PROGRESS: "preview_progress",
+  BEADS_STATE_CHANGED: "beads_state_changed",
+  BEADS_PROVISIONING: "beads_provisioning",
+  BEADS_TEAM_MEMORY_CHANGED: "beads_team_memory_changed",
+  AUDIT_EVENT_ADDED: "audit_event_added",
+  SELF_HOSTED_HOST_ADDED: "self_hosted_host_added",
+  SELF_HOSTED_HOST_STATUS: "self_hosted_host_status",
+  SELF_HOSTED_HOST_REMOVED: "self_hosted_host_removed",
+  SELF_HOSTED_HOST_TELEMETRY: "self_hosted_host_telemetry",
+  SELF_HOSTED_HOST_METRICS: "self_hosted_host_metrics",
+  SELF_HOSTED_HOST_SESSIONS: "self_hosted_host_sessions",
+  SELF_HOSTED_DEPLOY_PROGRESS: "self_hosted_deploy_progress",
+  REFERRAL_REWARD_EARNED: "referral_reward_earned",
+  HEADROOM_PROGRESS: "headroom_progress",
+  HEADROOM_STATUS: "headroom_status",
+  BEADS_STATUS: "beads_status",
+  LINKED_AGENT_HEADROOM_BUDGET_UPDATED: "linked_agent_headroom_budget_updated",
+  CLI_UPDATE_AVAILABLE: "cli_update_available",
+  AGENT_INSTALL_PROGRESS: "agent_install_progress",
+  AGENT_INSTALL_FAILED: "agent_install_failed",
+  CLI_UPDATE_PROGRESS: "cli_update_progress",
+  CLI_UPDATE_FAILED: "cli_update_failed"
+};
+
 // ../../packages/shared/src/preview-prompts.ts
 var PREVIEW_DETECT_PROMPT = `
 Analyze the project in the current working directory and return how to start
@@ -5418,7 +5511,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.53.3" : "0.0.0-dev",
+    cliVersion: true ? "2.53.4" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5599,7 +5692,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.53.3",
+  version: "2.53.4",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6633,7 +6726,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.53.3" ? { ideVersion: "2.53.3" } : {}
+      ..."2.53.4" ? { ideVersion: "2.53.4" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8015,68 +8108,68 @@ var import_child_process22 = require("child_process");
 var import_which2 = __toESM(require("which"));
 
 // src/lib/payload.ts
-var import_zod = require("zod");
-var fileEntrySchema = import_zod.z.object({
-  filename: import_zod.z.string().min(1).max(256),
-  mimeType: import_zod.z.string(),
-  base64: import_zod.z.string()
+var import_zod2 = require("zod");
+var fileEntrySchema = import_zod2.z.object({
+  filename: import_zod2.z.string().min(1).max(256),
+  mimeType: import_zod2.z.string(),
+  base64: import_zod2.z.string()
 });
-var startCommandSchema = import_zod.z.object({
-  prompt: import_zod.z.string().optional(),
-  files: import_zod.z.array(fileEntrySchema).optional(),
-  input: import_zod.z.string().optional(),
-  index: import_zod.z.number().optional(),
-  from: import_zod.z.number().optional(),
-  id: import_zod.z.string().optional(),
-  auto: import_zod.z.boolean().optional(),
+var startCommandSchema = import_zod2.z.object({
+  prompt: import_zod2.z.string().optional(),
+  files: import_zod2.z.array(fileEntrySchema).optional(),
+  input: import_zod2.z.string().optional(),
+  index: import_zod2.z.number().optional(),
+  from: import_zod2.z.number().optional(),
+  id: import_zod2.z.string().optional(),
+  auto: import_zod2.z.boolean().optional(),
   // `read_file` / `write_file` for the mobile + landing mini-IDE modal.
   // `path` is bounded to 4096 chars (a comfortable POSIX path max) so a
   // malformed payload can't blow up the disk-side validator.
-  path: import_zod.z.string().min(1).max(4096).optional(),
-  content: import_zod.z.string().optional(),
+  path: import_zod2.z.string().min(1).max(4096).optional(),
+  content: import_zod2.z.string().optional(),
   // Mini-IDE / project ops. `paths` (plural, strings) is used for
   // git_commit's optional file selection — distinct from `files`
   // (FileEntry[]) used by `start_task` for attachments.
-  query: import_zod.z.string().max(256).optional(),
-  message: import_zod.z.string().max(8e3).optional(),
-  paths: import_zod.z.array(import_zod.z.string().max(4096)).optional(),
+  query: import_zod2.z.string().max(256).optional(),
+  message: import_zod2.z.string().max(8e3).optional(),
+  paths: import_zod2.z.array(import_zod2.z.string().max(4096)).optional(),
   // `show_install_command` — backend pushes the self-hosted install
   // one-liner the user copies onto their own box. DISPLAY-ONLY: the
   // CLI prints it to the terminal and never executes it. Bounded to
   // 8192 chars so a malformed payload can't flood the terminal.
-  command: import_zod.z.string().min(1).max(8192).optional(),
-  side: import_zod.z.enum(["ours", "theirs"]).optional(),
-  limit: import_zod.z.number().int().min(1).max(500).optional(),
+  command: import_zod2.z.string().min(1).max(8192).optional(),
+  side: import_zod2.z.enum(["ours", "theirs"]).optional(),
+  limit: import_zod2.z.number().int().min(1).max(500).optional(),
   // search_files options. `query` is the haystack/needle string,
   // declared above for list_files. The rest mirror VS Code's
   // search panel toggles + the @codeam/ide-core SearchOptions
   // contract.
-  caseSensitive: import_zod.z.boolean().optional(),
-  wholeWord: import_zod.z.boolean().optional(),
-  regex: import_zod.z.boolean().optional(),
-  include: import_zod.z.array(import_zod.z.string().max(512)).max(64).optional(),
-  exclude: import_zod.z.array(import_zod.z.string().max(512)).max(64).optional(),
-  maxResults: import_zod.z.number().int().min(1).max(500).optional(),
+  caseSensitive: import_zod2.z.boolean().optional(),
+  wholeWord: import_zod2.z.boolean().optional(),
+  regex: import_zod2.z.boolean().optional(),
+  include: import_zod2.z.array(import_zod2.z.string().max(512)).max(64).optional(),
+  exclude: import_zod2.z.array(import_zod2.z.string().max(512)).max(64).optional(),
+  maxResults: import_zod2.z.number().int().min(1).max(500).optional(),
   // terminal_open / _write / _resize / _close. `sessionId` is the
   // opaque uuid returned by `terminal_open` and required by every
   // subsequent op. `data` carries keystrokes (any UTF-8 string).
   // `cwd` lets the host pin the spawn directory.
-  sessionId: import_zod.z.string().min(1).max(128).optional(),
-  data: import_zod.z.string().max(64 * 1024).optional(),
-  cwd: import_zod.z.string().max(4096).optional(),
-  cols: import_zod.z.number().int().min(1).max(500).optional(),
-  rows: import_zod.z.number().int().min(1).max(200).optional(),
+  sessionId: import_zod2.z.string().min(1).max(128).optional(),
+  data: import_zod2.z.string().max(64 * 1024).optional(),
+  cwd: import_zod2.z.string().max(4096).optional(),
+  cols: import_zod2.z.number().int().min(1).max(500).optional(),
+  rows: import_zod2.z.number().int().min(1).max(200).optional(),
   // `apply_file_review` (Epic B follow-up — backend pushes this when
   // the user clicks APPROVE_CHANGES / REJECT_CHANGES in the diff
   // drawer). `filePath` is relative to the enclosing git repo; the
   // handler walks up from it to find `.git/` and runs `git add` or
   // `git restore` from there. `action='approved'` stages the edit,
   // `action='rejected'` discards every worktree change on the file.
-  filePath: import_zod.z.string().min(1).max(4096).optional(),
-  action: import_zod.z.enum(["approved", "rejected", "enable", "disable", "status"]).optional(),
+  filePath: import_zod2.z.string().min(1).max(4096).optional(),
+  action: import_zod2.z.enum(["approved", "rejected", "enable", "disable", "status"]).optional(),
   // `headroom_configure` — savings ingest URL delivered from the session
   // when enabling Headroom on-demand. Bounded to 2048 chars.
-  savingsIngestUrl: import_zod.z.string().url().max(2048).optional(),
+  savingsIngestUrl: import_zod2.z.string().url().max(2048).optional(),
   // `request_link_credentials` — backend fires this from the
   // heartbeat handler when it notices the user is running an agent
   // they haven't vaulted yet. Also reused by `get_context` /
@@ -8092,7 +8185,7 @@ var startCommandSchema = import_zod.z.object({
   // Without nullable() zod rejects the whole payload, the dispatcher
   // logs "Ignoring malformed list_models payload" and the model
   // picker / context never load.
-  agentId: import_zod.z.string().max(64).nullable().optional(),
+  agentId: import_zod2.z.string().max(64).nullable().optional(),
   // `request_ai_summary` / `request_ai_insight` — backend fires
   // these on turn-end (+ file selection) when LinkedAgent.
   // aiInsightsEnabled is true. The CLI spawns the agent in
@@ -8106,12 +8199,12 @@ var startCommandSchema = import_zod.z.object({
   // unchanged on the result POST so the backend doesn't have to
   // recompute (numbers came from file_changes; the agent only
   // writes the narrative).
-  turnId: import_zod.z.string().max(128).optional(),
-  fileChangeId: import_zod.z.string().max(128).optional(),
-  stats: import_zod.z.object({
-    added: import_zod.z.number().int(),
-    removed: import_zod.z.number().int(),
-    complexityShift: import_zod.z.number().int()
+  turnId: import_zod2.z.string().max(128).optional(),
+  fileChangeId: import_zod2.z.string().max(128).optional(),
+  stats: import_zod2.z.object({
+    added: import_zod2.z.number().int(),
+    removed: import_zod2.z.number().int(),
+    complexityShift: import_zod2.z.number().int()
   }).optional(),
   // `preview_start` carries the agent-detected `PreviewDetection`
   // shape from the mobile / web confirmation sheet. Mirrors
@@ -8120,23 +8213,23 @@ var startCommandSchema = import_zod.z.object({
   // running against a newer backend that adds optional fields still
   // accepts the payload; the handler validates the shape it needs
   // before spawning.
-  detection: import_zod.z.object({
-    framework: import_zod.z.string().max(64),
-    command: import_zod.z.string().min(1).max(256),
-    args: import_zod.z.array(import_zod.z.string().max(1024)).max(64),
-    port: import_zod.z.number().int().min(1).max(65535),
-    ready_pattern: import_zod.z.string().min(1).max(4096),
-    env: import_zod.z.record(import_zod.z.string(), import_zod.z.string().max(8192)).optional(),
+  detection: import_zod2.z.object({
+    framework: import_zod2.z.string().max(64),
+    command: import_zod2.z.string().min(1).max(256),
+    args: import_zod2.z.array(import_zod2.z.string().max(1024)).max(64),
+    port: import_zod2.z.number().int().min(1).max(65535),
+    ready_pattern: import_zod2.z.string().min(1).max(4096),
+    env: import_zod2.z.record(import_zod2.z.string(), import_zod2.z.string().max(8192)).optional(),
     // The agent emits entries as either {cmd,args} objects OR bare command
     // strings ("npx prisma generate"). Accept both and normalize strings to
     // {cmd,args} so a string entry doesn't reject the whole detection (which
     // would silently drop the preview) and downstream always gets objects.
-    setup_commands: import_zod.z.array(
-      import_zod.z.union([
-        import_zod.z.string().min(1).max(1024),
-        import_zod.z.object({
-          cmd: import_zod.z.string().min(1).max(256),
-          args: import_zod.z.array(import_zod.z.string().max(1024)).max(64)
+    setup_commands: import_zod2.z.array(
+      import_zod2.z.union([
+        import_zod2.z.string().min(1).max(1024),
+        import_zod2.z.object({
+          cmd: import_zod2.z.string().min(1).max(256),
+          args: import_zod2.z.array(import_zod2.z.string().max(1024)).max(64)
         })
       ]).transform((entry) => {
         if (typeof entry !== "string") return entry;
@@ -8144,15 +8237,15 @@ var startCommandSchema = import_zod.z.object({
         return { cmd: parts[0] ?? "", args: parts.slice(1) };
       })
     ).max(32).optional(),
-    notes: import_zod.z.string().max(4096).nullable().optional()
+    notes: import_zod2.z.string().max(4096).nullable().optional()
   }).optional(),
   // `env_write` carries the full desired set of environment variables
   // for the project `.env`. Bounded so a malformed payload can't flood
   // the disk-side serializer. `env_read` / `preview_restart` send no payload.
-  vars: import_zod.z.array(
-    import_zod.z.object({
-      key: import_zod.z.string().min(1).max(256),
-      value: import_zod.z.string().max(32768)
+  vars: import_zod2.z.array(
+    import_zod2.z.object({
+      key: import_zod2.z.string().min(1).max(256),
+      value: import_zod2.z.string().max(32768)
     })
   ).max(512).optional()
 });
@@ -8817,7 +8910,7 @@ __export(dist_exports, {
   S_ERROR: () => ge,
   S_INFO: () => he,
   S_PASSWORD_MASK: () => xe,
-  S_RADIO_ACTIVE: () => z3,
+  S_RADIO_ACTIVE: () => z4,
   S_RADIO_INACTIVE: () => H2,
   S_STEP_ACTIVE: () => _e,
   S_STEP_CANCEL: () => oe,
@@ -9296,7 +9389,7 @@ function w(r, t2) {
   const e = r;
   e.isTTY && e.setRawMode(t2);
 }
-function z2({ input: r = import_node_process.stdin, output: t2 = import_node_process.stdout, overwrite: e = true, hideCursor: s = true } = {}) {
+function z3({ input: r = import_node_process.stdin, output: t2 = import_node_process.stdout, overwrite: e = true, hideCursor: s = true } = {}) {
   const i = _.createInterface({ input: r, output: t2, prompt: "", tabSize: 1 });
   _.emitKeypressEvents(r, i), r instanceof import_node_tty.ReadStream && r.isTTY && r.setRawMode(true);
   const n = (o, { name: a, sequence: h }) => {
@@ -9908,7 +10001,7 @@ var d2 = w2("\u2502", "|");
 var E2 = w2("\u2514", "\u2014");
 var Ie = w2("\u2510", "T");
 var Ee = w2("\u2518", "\u2014");
-var z3 = w2("\u25CF", ">");
+var z4 = w2("\u25CF", ">");
 var H2 = w2("\u25CB", " ");
 var te = w2("\u25FB", "[\u2022]");
 var U = w2("\u25FC", "[+]");
@@ -10000,7 +10093,7 @@ var Ae = (e) => new H({ options: e.options, initialValue: e.initialValue ? [e.in
     const $2 = Me(a), y2 = a.hint && a.value === this.focusedValue ? (0, import_node_util2.styleText)("dim", ` (${a.hint})`) : "";
     switch (l) {
       case "active":
-        return `${(0, import_node_util2.styleText)("green", z3)} ${$2}${y2}`;
+        return `${(0, import_node_util2.styleText)("green", z4)} ${$2}${y2}`;
       case "inactive":
         return `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", $2)}`;
       case "disabled":
@@ -10113,9 +10206,9 @@ ${(0, import_node_util2.styleText)("gray", d2)}` : ""}`;
       }
       default: {
         const l = r ? `${(0, import_node_util2.styleText)("cyan", d2)}  ` : "", $2 = r ? (0, import_node_util2.styleText)("cyan", E2) : "";
-        return `${c2}${l}${this.value ? `${(0, import_node_util2.styleText)("green", z3)} ${i}` : `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", i)}`}${e.vertical ? r ? `
+        return `${c2}${l}${this.value ? `${(0, import_node_util2.styleText)("green", z4)} ${i}` : `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", i)}`}${e.vertical ? r ? `
 ${(0, import_node_util2.styleText)("cyan", d2)}  ` : `
-` : ` ${(0, import_node_util2.styleText)("dim", "/")} `}${this.value ? `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", s)}` : `${(0, import_node_util2.styleText)("green", z3)} ${s}`}
+` : ` ${(0, import_node_util2.styleText)("dim", "/")} `}${this.value ? `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", s)}` : `${(0, import_node_util2.styleText)("green", z4)} ${s}`}
 ${$2}
 `;
       }
@@ -10446,7 +10539,7 @@ var fe = ({ indicator: e = "dots", onCancel: i, output: s = process.stdout, canc
     const A2 = (performance.now() - _2) / 1e3, k2 = Math.floor(A2 / 60), L2 = Math.floor(A2 % 60);
     return k2 > 0 ? `[${k2}m ${L2}s]` : `[${L2}s]`;
   }, D2 = a.withGuide ?? u.withGuide, ie = (_2 = "") => {
-    p2 = true, $2 = z2({ output: s }), g = R2(_2), h = performance.now(), D2 && s.write(`${(0, import_node_util2.styleText)("gray", d2)}
+    p2 = true, $2 = z3({ output: s }), g = R2(_2), h = performance.now(), D2 && s.write(`${(0, import_node_util2.styleText)("gray", d2)}
 `);
     let A2 = 0, k2 = 0;
     x(), y2 = setInterval(() => {
@@ -10517,7 +10610,7 @@ var _t = (e) => {
       case "selected":
         return `${re(u2, (n) => (0, import_node_util2.styleText)("dim", n))}`;
       case "active":
-        return `${(0, import_node_util2.styleText)("green", z3)} ${u2}${s.hint ? ` ${(0, import_node_util2.styleText)("dim", `(${s.hint})`)}` : ""}`;
+        return `${(0, import_node_util2.styleText)("green", z4)} ${u2}${s.hint ? ` ${(0, import_node_util2.styleText)("dim", `(${s.hint})`)}` : ""}`;
       case "cancelled":
         return `${re(u2, (n) => (0, import_node_util2.styleText)(["strikethrough", "dim"], n))}`;
       default:
@@ -15133,7 +15226,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.53.3" : null;
+  const current = true ? "2.53.4" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15150,7 +15243,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.53.3" : null;
+  const current = true ? "2.53.4" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15861,7 +15954,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process16.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.53.3" : null;
+  return true ? "2.53.4" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -16574,10 +16667,10 @@ async function configureHeadroom(action, ctx, deps) {
     if (!isHeadroomSupportedAgent(ctx.agent)) return { supported: false };
     const ok = await deps.setup(ctx.agent, void 0, {
       extras: ["proxy", "code", "image"],
-      onProgress: (step) => deps.emit({ type: "headroom_progress", step })
+      onProgress: (step) => deps.emit({ type: USER_EVENTS.HEADROOM_PROGRESS, step })
     });
     if (!ok) {
-      deps.emit({ type: "headroom_status", state: "error" });
+      deps.emit({ type: USER_EVENTS.HEADROOM_STATUS, state: "error" });
       return { enabled: false };
     }
     deps.persist({ enabled: true, agent: kind, ingestUrl: ctx.savingsIngestUrl });
@@ -16588,14 +16681,14 @@ async function configureHeadroom(action, ctx, deps) {
         pluginAuthToken: ctx.pluginAuthToken
       });
     }
-    deps.emit({ type: "headroom_status", state: "enabled" });
+    deps.emit({ type: USER_EVENTS.HEADROOM_STATUS, state: "enabled" });
     return { enabled: true };
   }
   deps.restoreAgentHeadroomConfig(kind);
   deps.stopProxy();
   deps.persist({ enabled: false });
   deps.stopReporter();
-  deps.emit({ type: "headroom_status", state: "disabled" });
+  deps.emit({ type: USER_EVENTS.HEADROOM_STATUS, state: "disabled" });
   return { enabled: false };
 }
 
@@ -17575,9 +17668,12 @@ function coerceIssue(row, projectKey) {
     owner: typeof r.owner === "string" && r.owner.length > 0 ? r.owner : null,
     created_at: typeof r.created_at === "string" ? r.created_at : "",
     updated_at: typeof r.updated_at === "string" ? r.updated_at : "",
-    dependency_count: typeof r.dependency_count === "number" ? r.dependency_count : void 0,
-    dependent_count: typeof r.dependent_count === "number" ? r.dependent_count : void 0,
-    comment_count: typeof r.comment_count === "number" ? r.comment_count : void 0,
+    // The backend ingest DTO validates the counts as REQUIRED ints — an
+    // omitted count would 400 the whole snapshot. Default to 0 when a bd
+    // version omits one instead of dropping the field.
+    dependency_count: typeof r.dependency_count === "number" ? r.dependency_count : 0,
+    dependent_count: typeof r.dependent_count === "number" ? r.dependent_count : 0,
+    comment_count: typeof r.comment_count === "number" ? r.comment_count : 0,
     projectKey
   };
 }
@@ -18414,9 +18510,10 @@ var BeadsWatcher = class {
       projectLabel,
       fullSnapshot: true,
       issues,
-      // The backend DTO requires `dependencies` (not `deps`). We don't track
-      // edges in the P0 snapshot yet, so always send an empty array rather than
-      // omitting the field (an omitted/conditional field 400s the ingest).
+      // We don't track edges in the P0 snapshot yet, so send an empty array.
+      // (The backend DTO marks `dependencies` optional and tolerates absence,
+      // but the wire contract in @codeagent/shared says "always sent" — keep
+      // the payload deterministic.)
       dependencies: [],
       memories: [],
       // Always send a summary — a null `bd status` yields a zeroed block rather
@@ -19238,7 +19335,7 @@ var beadsConfigureH = async (ctx, cmd, parsed) => {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken: token,
-          type: "beads_status",
+          type: USER_EVENTS.BEADS_STATUS,
           payload: Object.fromEntries(
             Object.entries(event).filter(([k2]) => k2 !== "type")
           )
@@ -19629,7 +19726,7 @@ var requestPreviewDetectH = (ctx) => {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken: ctx.pluginAuthToken,
-      type: "preview_error",
+      type: USER_EVENTS.PREVIEW_ERROR,
       payload: {
         stage: "detection",
         message: `Preview detection isn't available on ${ctx.runtime.id} sessions yet \u2014 link a Claude or Codex agent.`
@@ -19646,7 +19743,7 @@ var requestPreviewDetectH = (ctx) => {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_detection_ready",
+        type: USER_EVENTS.PREVIEW_DETECTION_READY,
         payload: { detection: fromFile }
       });
       return;
@@ -19655,7 +19752,7 @@ var requestPreviewDetectH = (ctx) => {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_detection_pending"
+      type: USER_EVENTS.PREVIEW_DETECTION_PENDING
     });
     log.info("preview", "detect: invoking generateOneShot");
     const startedAt = Date.now();
@@ -19671,7 +19768,7 @@ var requestPreviewDetectH = (ctx) => {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_error",
+        type: USER_EVENTS.PREVIEW_ERROR,
         payload: {
           stage: "detection",
           message: "Agent returned invalid JSON. Try again, or add a .codeam/preview.json override."
@@ -19685,7 +19782,7 @@ var requestPreviewDetectH = (ctx) => {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_error",
+        type: USER_EVENTS.PREVIEW_ERROR,
         payload: {
           stage: "unsupported",
           message: detection.notes ?? "No dev server applies to this project."
@@ -19701,7 +19798,7 @@ var requestPreviewDetectH = (ctx) => {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_detection_ready",
+      type: USER_EVENTS.PREVIEW_DETECTION_READY,
       payload: { detection }
     });
   })();
@@ -19818,7 +19915,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_progress",
+      type: USER_EVENTS.PREVIEW_PROGRESS,
       payload: { step, message, timestamp: Date.now() }
     });
   };
@@ -19834,7 +19931,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_ready",
+        type: USER_EVENTS.PREVIEW_READY,
         payload: { url: existing.url, framework: existing.framework, port: detection.port }
       });
       return;
@@ -19843,7 +19940,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_starting",
+      type: USER_EVENTS.PREVIEW_STARTING,
       payload: { framework: detection.framework, port: detection.port }
     });
     emitProgress("ENV_DETECTED", `${detection.framework}`);
@@ -19870,7 +19967,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
             sessionId: ctx.sessionId,
             pluginId: ctx.pluginId,
             pluginAuthToken,
-            type: "preview_error",
+            type: USER_EVENTS.PREVIEW_ERROR,
             payload: {
               stage: "spawn",
               message: `This project uses yarn but yarn isn't installed, and installing it automatically failed (npm install -g yarn, exit ${ensured.code}). Install yarn in this environment and try the preview again.`
@@ -19895,7 +19992,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "ready_timeout",
             message: `Dependency install (${missingDeps.cmd} ${missingDeps.args.join(" ")}) didn't finish within ${Math.round(INSTALL_TIMEOUT_MS / 1e3)}s and was stopped. Run it manually in this project, then try the preview again.`
@@ -19908,7 +20005,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "spawn",
             message: `Dependency install failed (${missingDeps.cmd} ${missingDeps.args.join(" ")}, exit ${result.code}). Run it manually in this project and try again.`
@@ -19945,7 +20042,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "ready_timeout",
             message: `Setup step (${setup.cmd} ${setup.args.join(" ")}) didn't finish within ${Math.round(timeoutMs / 1e3)}s and was stopped.`
@@ -19958,7 +20055,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "spawn",
             message: `Setup failed (${setup.cmd} ${setup.args.join(" ")}, exit ${result.code}).`
@@ -19979,7 +20076,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_ready",
+          type: USER_EVENTS.PREVIEW_READY,
           payload: { url: raceExisting.url, framework: raceExisting.framework, port: detection.port }
         });
         return;
@@ -19999,7 +20096,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
             sessionId: ctx.sessionId,
             pluginId: ctx.pluginId,
             pluginAuthToken,
-            type: "preview_error",
+            type: USER_EVENTS.PREVIEW_ERROR,
             payload: {
               stage: "spawn",
               message: `Port ${detection.port} is still in use after stopping the previous preview. Wait a moment and try again.`
@@ -20012,7 +20109,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "spawn",
             message: `Port ${detection.port} is already in use by another process, so the dev server can't start there. Stop whatever is listening on port ${detection.port} and try the preview again.`
@@ -20060,7 +20157,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_error",
+        type: USER_EVENTS.PREVIEW_ERROR,
         payload: {
           stage: "spawn",
           message: `The dev server exited (code ${outcome.code}) before it was ready. It may need a database or other services.`,
@@ -20075,7 +20172,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
         pluginAuthToken,
-        type: "preview_error",
+        type: USER_EVENTS.PREVIEW_ERROR,
         payload: {
           stage: "ready_timeout",
           message: "The dev server didn't become ready in time. It may be stuck waiting on a database or other service.",
@@ -20104,7 +20201,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: { stage: "tunnel", message: "Expo did not report a tunnel URL." }
         });
         return;
@@ -20120,7 +20217,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: { stage: "tunnel", message: e.message }
         });
         return;
@@ -20214,7 +20311,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
           pluginAuthToken,
-          type: "preview_error",
+          type: USER_EVENTS.PREVIEW_ERROR,
           payload: {
             stage: "tunnel",
             message: `Tunnel did not become reachable after ${MAX_TUNNEL_ATTEMPTS} attempts (${lastTunnelErr}). Cloudflare Quick Tunnels occasionally fail to register \u2014 please retry.`
@@ -20238,7 +20335,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_ready",
+      type: USER_EVENTS.PREVIEW_READY,
       payload: { url, framework: detection.framework, port: detection.port }
     });
   })().catch((err) => {
@@ -20248,7 +20345,7 @@ function startPreviewFromDetection(ctx, detection, pluginAuthToken) {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_error",
+      type: USER_EVENTS.PREVIEW_ERROR,
       payload: { stage: "spawn", message: `Preview failed to start: ${message}` }
     });
   });
@@ -20266,7 +20363,7 @@ var previewStopH = (ctx) => {
       sessionId: ctx.sessionId,
       pluginId: ctx.pluginId,
       pluginAuthToken,
-      type: "preview_stopped",
+      type: USER_EVENTS.PREVIEW_STOPPED,
       payload: { reason: "user" }
     });
   })();
@@ -21457,15 +21554,15 @@ var path54 = __toESM(require("path"));
 var os40 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
 var http6 = __toESM(require("http"));
-var import_zod2 = require("zod");
-var historyRecordSchema = import_zod2.z.object({
-  type: import_zod2.z.string().optional(),
-  timestamp: import_zod2.z.union([import_zod2.z.string(), import_zod2.z.number()]).optional(),
-  uuid: import_zod2.z.string().optional(),
-  isMeta: import_zod2.z.boolean().optional(),
-  message: import_zod2.z.object({
+var import_zod3 = require("zod");
+var historyRecordSchema = import_zod3.z.object({
+  type: import_zod3.z.string().optional(),
+  timestamp: import_zod3.z.union([import_zod3.z.string(), import_zod3.z.number()]).optional(),
+  uuid: import_zod3.z.string().optional(),
+  isMeta: import_zod3.z.boolean().optional(),
+  message: import_zod3.z.object({
     // Claude content is either a string or an array of typed blocks.
-    content: import_zod2.z.union([import_zod2.z.string(), import_zod2.z.array(import_zod2.z.unknown())]).optional()
+    content: import_zod3.z.union([import_zod3.z.string(), import_zod3.z.array(import_zod3.z.unknown())]).optional()
   }).passthrough().optional()
 }).passthrough();
 var API_BASE8 = resolveApiBaseUrl();
@@ -31719,7 +31816,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.53.3" : "0.0.0-dev";
+  const cliVersion = true ? "2.53.4" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -31918,7 +32015,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.53.3" : "unknown";
+  const v = true ? "2.53.4" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.53.3",
+  "version": "2.53.4",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",