codeam-cli 2.60.24 → 2.60.26

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.60.24] — 2026-07-09
+
+### Added
+
+- **cli:** Coderabbit reviewer — link (OAuth + API key) + review relay wiring
+
+### Fixed
+
+- **cli:** Show OS-correct install hint for kimi/cursor on Windows
+
 ## [2.60.23] — 2026-07-09
 
 ### Added

package/dist/index.js

@@ -330,10 +330,14 @@ var AGENT_REGISTRY = {
     displayName: "CodeRabbit",
     binaryName: "coderabbit",
     enabled: true,
-    // Backend registry is authoritative: CodeRabbit links via a real
-    // API key only (no OAuth flow exists in api-v2).
-    supportedAuthKinds: ["api_key"],
-    preferredAuthKind: "api_key",
+    // CodeRabbit links via a CLI-driven LOOPBACK OAuth (`coderabbit auth
+    // login --agent`): the CLI captures the token and hands it to the vault
+    // through `linkFromCli` (method:'oauth'), same as the terminal handoff.
+    // `oauth_token` is preferred; a real API key is still accepted as a
+    // fallback. There is no backend PKCE provider — the loopback runs on the
+    // user's own machine, so linking is always CLI-mediated.
+    supportedAuthKinds: ["oauth_token", "api_key"],
+    preferredAuthKind: "oauth_token",
     headroomWrappable: false,
     // Legacy PTY runtime — no ACP adapter registered.
     acp: false
@@ -5680,7 +5684,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.24" : "0.0.0-dev",
+    cliVersion: true ? "2.60.26" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5861,7 +5865,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.24",
+  version: "2.60.26",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6954,7 +6958,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.24" ? { ideVersion: "2.60.24" } : {}
+      ..."2.60.26" ? { ideVersion: "2.60.26" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -15637,7 +15641,7 @@ async function configureCoderabbit(input, deps = {}) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process23 = require("child_process");
 var os35 = __toESM(require("os"));
 var fs41 = __toESM(require("fs"));
 var path43 = __toESM(require("path"));
@@ -16056,6 +16060,7 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken) {
 var fs35 = __toESM(require("fs"));
 var os31 = __toESM(require("os"));
 var path38 = __toESM(require("path"));
+var import_node_child_process17 = require("child_process");
 var PUBLIC_TO_INTERNAL_AGENT = {
   claude_code: "claude",
   claude: "claude",
@@ -16169,9 +16174,24 @@ var kimiProvisioner = {
       return { KIMI_API_KEY: auth.value };
     }
     credentialsFiles.forEach((f) => writeFile0600(f, auth.value));
+    provisionKimiConfig(home);
     return {};
   }
 };
+function provisionKimiConfig(home) {
+  try {
+    const osStrat = createOsStrategy();
+    const binary = osStrat.findInPath("kimi");
+    if (!binary) return;
+    const launch = osStrat.buildLaunch(binary, ["login"]);
+    (0, import_node_child_process17.spawnSync)(launch.cmd, launch.args, {
+      stdio: "ignore",
+      timeout: 6e4,
+      env: { ...process.env, HOME: home, USERPROFILE: home }
+    });
+  } catch {
+  }
+}
 var coderabbitProvisioner = {
   write(auth, home) {
     const dir = path38.join(home, ".coderabbit");
@@ -16222,7 +16242,7 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os31.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var fs36 = __toESM(require("fs"));
 var os32 = __toESM(require("os"));
 var path39 = __toESM(require("path"));
@@ -16336,7 +16356,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process17.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process18.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16344,7 +16364,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process17.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process18.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -16498,12 +16518,12 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/os-packages.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var PM_INSTALL_TIMEOUT_MS = 18e4;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process18.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process19.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16512,7 +16532,7 @@ var defaultHeadroomRunner = {
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
       const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process18.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      const child = (0, import_node_child_process19.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
       let stdoutBuf = "";
       let settled = false;
@@ -17019,14 +17039,14 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/self-update.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process21 = require("child_process");
 
 // src/lib/updateNotifier.ts
 var fs39 = __toESM(require("fs"));
 var os34 = __toESM(require("os"));
 var path42 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
@@ -17120,7 +17140,7 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process19.execSync)("npm root -g", {
+    const root = (0, import_node_child_process20.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
@@ -17148,7 +17168,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process19.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process20.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -17169,7 +17189,7 @@ function maybeAutoUpdate(currentVersion, latest) {
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process19.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process20.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
@@ -17179,7 +17199,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.24" : null;
+  const current = true ? "2.60.26" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17196,7 +17216,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.24" : null;
+  const current = true ? "2.60.26" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17216,11 +17236,11 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.24" : null;
+  return true ? "2.60.26" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process20.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process21.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -17282,11 +17302,11 @@ async function runSelfUpdate() {
 }
 
 // src/commands/host/teardown.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process22 = require("child_process");
 var fs40 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process21.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process22.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
@@ -17294,7 +17314,7 @@ var defaultTeardownHeadroom = () => {
   try {
     const kind = JSON.parse(fs40.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process21.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process22.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
@@ -17452,7 +17472,7 @@ var CONTROL_AGENT_META = {
   headroomWrappable: false,
   acp: false
 };
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process22.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
@@ -17932,7 +17952,7 @@ var HostAgentSupervisor = class {
   runAgentInstall(script) {
     return new Promise((resolve7) => {
       const home = process.env.HOME || os35.homedir();
-      const child = (0, import_node_child_process22.spawn)("sh", ["-c", script], {
+      const child = (0, import_node_child_process23.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -18240,11 +18260,11 @@ function makeRealApplyBudgetDeps() {
 var import_child_process14 = require("child_process");
 var import_fs = require("fs");
 var import_promises = __toESM(require("fs/promises"));
-var import_os8 = __toESM(require("os"));
+var import_os9 = __toESM(require("os"));
 var import_path4 = __toESM(require("path"));
 var import_promises2 = require("stream/promises");
 var import_which = __toESM(require("which"));
-var CACHED_BINARY = import_path4.default.join(import_os8.default.homedir(), ".codeam", "bin", "cloudflared");
+var CACHED_BINARY = import_path4.default.join(import_os9.default.homedir(), ".codeam", "bin", "cloudflared");
 async function resolveCloudflared(opts = {}) {
   try {
     return await (0, import_which.default)("cloudflared");
@@ -18344,7 +18364,7 @@ function decodeTunnelToken(token) {
 }
 async function spawnNamedTunnel(bin, token, port) {
   const creds = decodeTunnelToken(token);
-  const credDir = import_path4.default.join(import_os8.default.homedir(), ".codeam");
+  const credDir = import_path4.default.join(import_os9.default.homedir(), ".codeam");
   await import_promises.default.mkdir(credDir, { recursive: true });
   const credFile = import_path4.default.join(credDir, `tunnel-${creds.TunnelID}.json`);
   await import_promises.default.writeFile(credFile, JSON.stringify(creds), { mode: 384 });
@@ -22396,7 +22416,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process23 = require("child_process");
+var import_node_child_process24 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -22409,7 +22429,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process23.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process24.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -22763,7 +22783,7 @@ var path59 = __toESM(require("path"));
 
 // src/agents/acp/agent-binary.ts
 var import_fs4 = __toESM(require("fs"));
-var import_os10 = __toESM(require("os"));
+var import_os11 = __toESM(require("os"));
 var import_path8 = __toESM(require("path"));
 var import_child_process25 = require("child_process");
 function currentPlatformKey() {
@@ -22859,7 +22879,7 @@ function resolveCursorAgentBinary(deps = {}) {
     const exe = import_path8.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
     return existsSync26(exe) ? exe : null;
   }
-  const home = deps.homedir ?? import_os10.default.homedir();
+  const home = deps.homedir ?? import_os11.default.homedir();
   const unix = import_path8.default.posix.join(home, ".local", "bin", "cursor-agent");
   return existsSync26(unix) ? unix : null;
 }
@@ -22933,7 +22953,7 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 }
 
 // src/agents/kimi/installer.ts
-var import_node_child_process24 = require("child_process");
+var import_node_child_process25 = require("child_process");
 var import_node_os6 = require("os");
 var import_node_path6 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
@@ -22941,7 +22961,7 @@ function kimiBinDir() {
   return (0, import_node_path6.join)(process.env.KIMI_CODE_HOME || (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
-  const r = (0, import_node_child_process24.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
+  const r = (0, import_node_child_process25.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
 function augmentPath2() {
@@ -22951,7 +22971,7 @@ function augmentPath2() {
 }
 async function runInstaller2() {
   return new Promise((resolve7) => {
-    const proc = (0, import_node_child_process24.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
+    const proc = (0, import_node_child_process25.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
     proc.on("close", (code) => resolve7(code === 0));
     proc.on("error", () => resolve7(false));
   });
@@ -23688,7 +23708,7 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process25 = require("child_process");
+var import_node_child_process26 = require("child_process");
 var fs57 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os46 = __toESM(require("os"));
@@ -26292,7 +26312,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process25.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process26.spawn)(adapter.command, adapter.args, {
       cwd,
       // extraEnv (e.g. CLAUDE_CODE_DISABLE_1M_CONTEXT=1 on an on-demand
       // re-spawn) layers over process.env; PATH stays last so the augmented
@@ -27676,7 +27696,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
 // src/services/turn-files/files-outbox.ts
 var fs60 = __toESM(require("fs/promises"));
 var path64 = __toESM(require("path"));
-var import_os11 = require("os");
+var import_os12 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var BACKOFF_STEPS_MS = [
@@ -27843,7 +27863,7 @@ function applyJitter(ms) {
   return Math.round(ms * factor);
 }
 function homeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os11.tmpdir)();
+  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os12.tmpdir)();
 }
 
 // src/services/turn-files/turn-file-aggregator.ts
@@ -34167,7 +34187,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.24" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.26" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -34366,7 +34386,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.24" : "unknown";
+  const v = true ? "2.60.26" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.60.24",
+  "version": "2.60.26",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",