codeam-cli 2.60.33 → 2.60.34

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.60.33] — 2026-07-10
+
+### Fixed
+
+- **cli:** Pre-accept Claude's per-workspace trust dialog on cloud sessions
+
 ## [2.60.32] — 2026-07-10
 
 ### Fixed

package/dist/index.js

@@ -5689,7 +5689,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.33" : "0.0.0-dev",
+    cliVersion: true ? "2.60.34" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5870,7 +5870,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.33",
+  version: "2.60.34",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6963,7 +6963,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.33" ? { ideVersion: "2.60.33" } : {}
+      ..."2.60.34" ? { ideVersion: "2.60.34" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8410,6 +8410,9 @@ var startCommandSchema = import_zod.z.object({
     "status",
     // `coderabbit_configure` — link the reviewer (OAuth or API key) + run a review.
     "link_oauth",
+    // Deliver a mobile-intercepted OAuth redirect to this host's coderabbit
+    // loopback so a remote-host `link_oauth` login completes (session-relay).
+    "link_deliver_callback",
     "link_apikey",
     "review"
   ]).optional(),
@@ -8423,6 +8426,10 @@ var startCommandSchema = import_zod.z.object({
   changeSet: import_zod.z.enum(["all", "committed", "uncommitted"]).optional(),
   base: import_zod.z.string().max(255).optional(),
   reviewDir: import_zod.z.string().max(1024).optional(),
+  // `coderabbit_configure` (action='link_deliver_callback') — the exact loopback
+  // redirect URL the mobile WebView intercepted (`http://127.0.0.1:<port>/callback?…`).
+  // Replayed to the local coderabbit login server; SSRF-guarded to loopback only.
+  callbackUrl: import_zod.z.string().max(4096).optional(),
   // `request_link_credentials` — backend fires this from the
   // heartbeat handler when it notices the user is running an agent
   // they haven't vaulted yet. Also reused by `get_context` /
@@ -15411,6 +15418,7 @@ var path36 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
 var fs31 = __toESM(require("fs"));
+var http6 = __toESM(require("http"));
 var os27 = __toESM(require("os"));
 var path35 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
@@ -15542,6 +15550,34 @@ function diffCapturedCredential(before, home) {
     return null;
   }
 }
+function deliverLoopbackCallback(callbackUrl, opts = {}) {
+  return new Promise((resolve7) => {
+    let url;
+    try {
+      url = new URL(callbackUrl);
+    } catch {
+      resolve7({ ok: false, error: "invalid callback URL" });
+      return;
+    }
+    const host2 = url.hostname.replace(/^\[|\]$/g, "");
+    const isLoopback = url.protocol === "http:" && (host2 === "127.0.0.1" || host2 === "localhost" || host2 === "::1");
+    if (!isLoopback) {
+      resolve7({ ok: false, error: `refusing non-loopback callback host: ${url.hostname}` });
+      return;
+    }
+    const get3 = opts.get ?? http6.get;
+    const req = get3(url, { timeout: opts.timeoutMs ?? 1e4 }, (res) => {
+      res.resume();
+      const status2 = res.statusCode ?? 0;
+      resolve7({ ok: status2 >= 200 && status2 < 400, status: status2 });
+    });
+    req.on("timeout", () => {
+      req.destroy();
+      resolve7({ ok: false, error: "callback delivery timed out" });
+    });
+    req.on("error", (err) => resolve7({ ok: false, error: err.message }));
+  });
+}
 
 // src/agents/coderabbit/configure.ts
 function defaultIsLoggedIn() {
@@ -17197,7 +17233,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.33" : null;
+  const current = true ? "2.60.34" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17214,7 +17250,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.33" : null;
+  const current = true ? "2.60.34" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17234,7 +17270,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.33" : null;
+  return true ? "2.60.34" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -21123,7 +21159,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var coderabbitConfigureH = async (ctx, cmd, parsed) => {
-  const action = parsed.action ?? "status";
+  const rawAction = parsed.action ?? "status";
   const token = ctx.pluginAuthToken;
   let emitChain = Promise.resolve();
   const emit2 = (type, payload) => {
@@ -21138,6 +21174,70 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       })
     );
   };
+  if (rawAction === "link_deliver_callback") {
+    const r = await deliverLoopbackCallback(parsed.callbackUrl ?? "");
+    await ctx.relay.sendResult(cmd.id, r.ok ? "completed" : "failed", {
+      action: "link_deliver_callback",
+      supported: true,
+      installed: true,
+      loggedIn: false,
+      delivered: r.ok,
+      ...r.error ? { error: r.error } : {}
+    });
+    return;
+  }
+  const action = rawAction;
+  const onEvent = (e) => {
+    if (e.kind === "awaiting_browser") {
+      emit2("coderabbit_progress", {
+        phase: "awaiting_browser",
+        authUrl: e.authUrl,
+        fallbackAuthUrl: e.fallbackAuthUrl
+      });
+    } else {
+      emit2("coderabbit_progress", { phase: e.kind });
+    }
+  };
+  const uploadCredential = token ? async (method, credential) => {
+    const r = await postLinkCredential({
+      agentId: "coderabbit",
+      sessionId: ctx.sessionId,
+      pluginId: ctx.pluginId,
+      pluginAuthToken: token,
+      method,
+      credential
+    });
+    return r.ok === true;
+  } : void 0;
+  if (action === "link_oauth") {
+    await ctx.relay.sendResult(cmd.id, "completed", {
+      action: "link_oauth",
+      supported: true,
+      installed: true,
+      loggedIn: false,
+      linked: false
+    });
+    void (async () => {
+      try {
+        const result2 = await configureCoderabbit({ action: "link_oauth" }, { onEvent, uploadCredential });
+        emit2("coderabbit_status", {
+          installed: result2.installed,
+          loggedIn: result2.loggedIn,
+          linked: result2.linked ?? false,
+          ...result2.error ? { error: result2.error } : {}
+        });
+      } catch (err) {
+        emit2("coderabbit_status", {
+          installed: false,
+          loggedIn: false,
+          linked: false,
+          error: err instanceof Error ? err.message : "CodeRabbit login failed"
+        });
+      }
+      await emitChain;
+    })();
+    return;
+  }
   const result = await configureCoderabbit(
     {
       action,
@@ -21145,28 +21245,8 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       review: { changeSet: parsed.changeSet, base: parsed.base, dir: parsed.reviewDir }
     },
     {
-      onEvent: (e) => {
-        if (e.kind === "awaiting_browser") {
-          emit2("coderabbit_progress", {
-            phase: "awaiting_browser",
-            authUrl: e.authUrl,
-            fallbackAuthUrl: e.fallbackAuthUrl
-          });
-        } else {
-          emit2("coderabbit_progress", { phase: e.kind });
-        }
-      },
-      uploadCredential: token ? async (method, credential) => {
-        const r = await postLinkCredential({
-          agentId: "coderabbit",
-          sessionId: ctx.sessionId,
-          pluginId: ctx.pluginId,
-          pluginAuthToken: token,
-          method,
-          credential
-        });
-        return r.ok === true;
-      } : void 0,
+      onEvent,
+      uploadCredential,
       runReview: (input) => new CoderabbitRuntimeStrategy(createOsStrategy()).runOneShot(input)
     }
   );
@@ -23135,7 +23215,7 @@ var fs56 = __toESM(require("fs"));
 var path61 = __toESM(require("path"));
 var os45 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
-var http6 = __toESM(require("http"));
+var http7 = __toESM(require("http"));
 var import_zod2 = require("zod");
 var historyRecordSchema = import_zod2.z.object({
   type: import_zod2.z.string().optional(),
@@ -23200,7 +23280,7 @@ function post(endpoint, body, pluginAuthToken) {
   return new Promise((resolve7) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE8}${endpoint}`);
-    const transport = u2.protocol === "https:" ? https7 : http6;
+    const transport = u2.protocol === "https:" ? https7 : http7;
     const req = transport.request(
       {
         hostname: u2.hostname,
@@ -26815,7 +26895,7 @@ var relaunchProxyWithoutBudget = async () => {
 };
 
 // src/services/streaming/transport.ts
-var http7 = __toESM(require("http"));
+var http8 = __toESM(require("http"));
 var https8 = __toESM(require("https"));
 var _transport4 = {
   post: _post3,
@@ -26825,7 +26905,7 @@ function _post3(url, headers, payload) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https8 : http7;
+    const lib = u2.protocol === "https:" ? https8 : http8;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -26867,7 +26947,7 @@ function _get(url, headers) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https8 : http7;
+    const lib = u2.protocol === "https:" ? https8 : http8;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -34243,7 +34323,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.33" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.34" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -34442,7 +34522,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.33" : "unknown";
+  const v = true ? "2.60.34" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.60.33",
+  "version": "2.60.34",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",