codeam-cli 2.60.33 → 2.60.35

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.60.34] — 2026-07-10
+
+### Added
+
+- **cli:** CodeRabbit session-relay OAuth — deliver mobile-intercepted redirect to host loopback
+
+## [2.60.33] — 2026-07-10
+
+### Fixed
+
+- **cli:** Pre-accept Claude's per-workspace trust dialog on cloud sessions
+
 ## [2.60.32] — 2026-07-10
 
 ### Fixed

package/dist/index.js

@@ -5689,7 +5689,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.33" : "0.0.0-dev",
+    cliVersion: true ? "2.60.35" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5870,7 +5870,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.33",
+  version: "2.60.35",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6963,7 +6963,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.33" ? { ideVersion: "2.60.33" } : {}
+      ..."2.60.35" ? { ideVersion: "2.60.35" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8410,6 +8410,9 @@ var startCommandSchema = import_zod.z.object({
     "status",
     // `coderabbit_configure` — link the reviewer (OAuth or API key) + run a review.
     "link_oauth",
+    // Deliver a mobile-intercepted OAuth redirect to this host's coderabbit
+    // loopback so a remote-host `link_oauth` login completes (session-relay).
+    "link_deliver_callback",
     "link_apikey",
     "review"
   ]).optional(),
@@ -8423,6 +8426,10 @@ var startCommandSchema = import_zod.z.object({
   changeSet: import_zod.z.enum(["all", "committed", "uncommitted"]).optional(),
   base: import_zod.z.string().max(255).optional(),
   reviewDir: import_zod.z.string().max(1024).optional(),
+  // `coderabbit_configure` (action='link_deliver_callback') — the exact loopback
+  // redirect URL the mobile WebView intercepted (`http://127.0.0.1:<port>/callback?…`).
+  // Replayed to the local coderabbit login server; SSRF-guarded to loopback only.
+  callbackUrl: import_zod.z.string().max(4096).optional(),
   // `request_link_credentials` — backend fires this from the
   // heartbeat handler when it notices the user is running an agent
   // they haven't vaulted yet. Also reused by `get_context` /
@@ -15406,15 +15413,16 @@ async function linkDryRunPreflight(ctx) {
 }
 
 // src/agents/coderabbit/configure.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var path36 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
+var import_node_child_process14 = require("child_process");
 var fs31 = __toESM(require("fs"));
 var os27 = __toESM(require("os"));
 var path35 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
-  const l = line.trim();
+  const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
   let rec;
   try {
@@ -15448,8 +15456,64 @@ function parseCoderabbitAuthEvent(line) {
       return rec.status ? { kind: "other", status: rec.status } : null;
   }
 }
+function resolvePython() {
+  for (const bin of ["python3", "python"]) {
+    try {
+      const r = (0, import_node_child_process14.spawnSync)(bin, ["--version"], { stdio: "ignore", timeout: 4e3 });
+      if (!r.error && r.status === 0) return bin;
+    } catch {
+    }
+  }
+  return null;
+}
+function spawnCoderabbitLoginProc(cmd, args2) {
+  const python = resolvePython();
+  if (python) {
+    const helper = path35.join(os27.tmpdir(), "codeam-cr-pty.py");
+    fs31.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
+    return (0, import_node_child_process14.spawn)(python, [helper, cmd, ...args2], {
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
+      shell: false
+    });
+  }
+  return (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["pipe", "pipe", "pipe"], shell: false });
+}
+var pendingCoderabbitLogin = null;
+function setPendingCoderabbitLogin(handle) {
+  pendingCoderabbitLogin = handle;
+}
+function normalizeCoderabbitCallback(input) {
+  const s = (input ?? "").trim();
+  if (!s) return null;
+  if (/^coderabbit-cli:\/\/auth-callback/i.test(s) || /^http:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?\//i.test(s)) {
+    return s;
+  }
+  if (/^[A-Za-z0-9+/=]+$/.test(s) && s.length >= 40) {
+    try {
+      const decoded = Buffer.from(s, "base64").toString("utf8");
+      if (/^coderabbit-cli:\/\/auth-callback/i.test(decoded)) return decoded;
+    } catch {
+    }
+  }
+  return null;
+}
+function deliverPendingCoderabbitCallback(callbackUrl) {
+  const url = normalizeCoderabbitCallback(callbackUrl);
+  if (!url) return { ok: false, error: "not a CodeRabbit callback token/URL" };
+  if (!pendingCoderabbitLogin) {
+    return { ok: false, error: "no CodeRabbit login is awaiting a callback" };
+  }
+  try {
+    pendingCoderabbitLogin.deliver(url);
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : "deliver failed" };
+  }
+}
 function runCoderabbitOAuthLogin(deps) {
   const timeoutMs = deps.timeoutMs ?? 18e4;
+  const spawnProc = deps.spawn ?? spawnCoderabbitLoginProc;
   return new Promise((resolve7) => {
     let settled = false;
     let stdout = "";
@@ -15458,6 +15522,7 @@ function runCoderabbitOAuthLogin(deps) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
+      setPendingCoderabbitLogin(null);
       try {
         child.kill("SIGKILL");
       } catch {
@@ -15466,7 +15531,7 @@ function runCoderabbitOAuthLogin(deps) {
     };
     let child;
     try {
-      child = deps.spawn("coderabbit", ["auth", "login", "--agent"]);
+      child = spawnProc("coderabbit", ["auth", "login", "--agent"]);
     } catch (err) {
       resolve7({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
       return;
@@ -15479,7 +15544,14 @@ function runCoderabbitOAuthLogin(deps) {
       const e = parseCoderabbitAuthEvent(line);
       if (!e) return;
       deps.onEvent?.(e);
-      if (e.kind === "authenticated") {
+      if (e.kind === "awaiting_browser") {
+        setPendingCoderabbitLogin({
+          deliver: (callbackUrl) => {
+            child.stdin?.write(`${callbackUrl}
+`);
+          }
+        });
+      } else if (e.kind === "authenticated") {
         last = e;
         finish({ ok: true, user: e.user, authType: e.authType, provider: e.provider, org: e.org });
       } else if (e.kind === "failed") {
@@ -15545,7 +15617,7 @@ function diffCapturedCredential(before, home) {
 
 // src/agents/coderabbit/configure.ts
 function defaultIsLoggedIn() {
-  const r = (0, import_node_child_process14.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
+  const r = (0, import_node_child_process15.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
     encoding: "utf8",
     timeout: 15e3
   });
@@ -15562,6 +15634,18 @@ function defaultIsLoggedIn() {
   }
   return false;
 }
+function defaultLoginWithApiKey(key) {
+  const r = (0, import_node_child_process15.spawnSync)("coderabbit", ["auth", "login", "--api-key", key], {
+    encoding: "utf8",
+    timeout: 3e4
+  });
+  const out2 = `${typeof r.stdout === "string" ? r.stdout : ""}${typeof r.stderr === "string" ? r.stderr : ""}`;
+  if (r.error) return { ok: false, error: r.error.message };
+  const failLine = out2.match(/API key authentication failed:[^\n]*/i);
+  if (failLine) return { ok: false, error: failLine[0].replace(/^[✗\s]+/, "").trim() };
+  if (r.status !== 0) return { ok: false, error: out2.trim() || "API key authentication failed" };
+  return { ok: true };
+}
 async function configureCoderabbit(input, deps = {}) {
   const os50 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
@@ -15569,6 +15653,7 @@ async function configureCoderabbit(input, deps = {}) {
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
+  const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
   const home = os50.homeDir();
   os50.augmentPath(
     os50.id === "win32" ? [
@@ -15594,8 +15679,22 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
+    if (!res2.installed) {
+      const ok = await ensureInstalled(os50);
+      res2.installed = ok;
+      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+    }
+    const login = loginWithApiKey(key);
+    if (!login.ok) {
+      return { ...res2, loggedIn: false, linked: false, error: login.error ?? "Invalid or expired API key" };
+    }
     const stored = deps.uploadCredential ? await deps.uploadCredential("api_key", key) : false;
-    return { ...res2, linked: stored, error: stored ? void 0 : "Failed to store API key" };
+    return {
+      ...res2,
+      loggedIn: true,
+      linked: stored,
+      ...stored ? {} : { error: "Signed in, but storing the API key for reuse failed" }
+    };
   }
   if (input.action === "link_oauth") {
     const res2 = base();
@@ -15605,10 +15704,7 @@ async function configureCoderabbit(input, deps = {}) {
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
     const before = snapshot();
-    const login = await runOAuth({
-      spawn: (cmd, args2) => (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] }),
-      onEvent: deps.onEvent
-    });
+    const login = await runOAuth({ onEvent: deps.onEvent });
     if (!login.ok) {
       return { ...res2, loggedIn: false, linked: false, error: login.error ?? "CodeRabbit login failed" };
     }
@@ -15655,7 +15751,7 @@ async function configureCoderabbit(input, deps = {}) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process23 = require("child_process");
 var os35 = __toESM(require("os"));
 var fs41 = __toESM(require("fs"));
 var path44 = __toESM(require("path"));
@@ -15668,7 +15764,7 @@ var path37 = __toESM(require("path"));
 // src/lib/restrict-to-owner.ts
 var import_node_fs5 = __toESM(require("fs"));
 var import_node_os4 = __toESM(require("os"));
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var BROAD_WINDOWS_SIDS = [
   "*S-1-1-0",
   "*S-1-5-11",
@@ -15680,7 +15776,7 @@ function restrictToOwner(filePath) {
   try {
     if (process.platform === "win32") {
       const username = import_node_os4.default.userInfo().username;
-      (0, import_node_child_process15.execFileSync)(
+      (0, import_node_child_process16.execFileSync)(
         "icacls",
         [
           filePath,
@@ -15942,9 +16038,9 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 var fs34 = __toESM(require("fs"));
 var os30 = __toESM(require("os"));
 var path38 = __toESM(require("path"));
-var import_node_child_process16 = require("child_process");
+var import_node_child_process17 = require("child_process");
 var import_node_util4 = require("util");
-var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process16.execFile);
+var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process17.execFile);
 function isAbsolutePathTarget(target) {
   return path38.isAbsolute(target);
 }
@@ -16240,7 +16336,7 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os31.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var fs36 = __toESM(require("fs"));
 var os32 = __toESM(require("os"));
 var path40 = __toESM(require("path"));
@@ -16354,7 +16450,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process17.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process18.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16362,7 +16458,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process17.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process18.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -16516,12 +16612,12 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/os-packages.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var PM_INSTALL_TIMEOUT_MS = 18e4;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process18.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process19.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16530,7 +16626,7 @@ var defaultHeadroomRunner = {
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
       const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process18.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      const child = (0, import_node_child_process19.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
       let stdoutBuf = "";
       let settled = false;
@@ -17037,14 +17133,14 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/self-update.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process21 = require("child_process");
 
 // src/lib/updateNotifier.ts
 var fs39 = __toESM(require("fs"));
 var os34 = __toESM(require("os"));
 var path43 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
@@ -17138,7 +17234,7 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process19.execSync)("npm root -g", {
+    const root = (0, import_node_child_process20.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
@@ -17166,7 +17262,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process19.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process20.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -17187,7 +17283,7 @@ function maybeAutoUpdate(currentVersion, latest) {
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process19.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process20.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
@@ -17197,7 +17293,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.33" : null;
+  const current = true ? "2.60.35" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17214,7 +17310,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.33" : null;
+  const current = true ? "2.60.35" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17234,11 +17330,11 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.33" : null;
+  return true ? "2.60.35" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process20.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process21.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -17300,11 +17396,11 @@ async function runSelfUpdate() {
 }
 
 // src/commands/host/teardown.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process22 = require("child_process");
 var fs40 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process21.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process22.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
@@ -17312,7 +17408,7 @@ var defaultTeardownHeadroom = () => {
   try {
     const kind = JSON.parse(fs40.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process21.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process22.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
@@ -17470,7 +17566,7 @@ var CONTROL_AGENT_META = {
   headroomWrappable: false,
   acp: false
 };
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process22.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
@@ -17950,7 +18046,7 @@ var HostAgentSupervisor = class {
   runAgentInstall(script) {
     return new Promise((resolve7) => {
       const home = process.env.HOME || os35.homedir();
-      const child = (0, import_node_child_process22.spawn)("sh", ["-c", script], {
+      const child = (0, import_node_child_process23.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -21123,7 +21219,7 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
   await ctx.relay.sendResult(cmd.id, "completed", result);
 };
 var coderabbitConfigureH = async (ctx, cmd, parsed) => {
-  const action = parsed.action ?? "status";
+  const rawAction = parsed.action ?? "status";
   const token = ctx.pluginAuthToken;
   let emitChain = Promise.resolve();
   const emit2 = (type, payload) => {
@@ -21138,6 +21234,70 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       })
     );
   };
+  if (rawAction === "link_deliver_callback") {
+    const r = deliverPendingCoderabbitCallback(parsed.callbackUrl ?? "");
+    await ctx.relay.sendResult(cmd.id, r.ok ? "completed" : "failed", {
+      action: "link_deliver_callback",
+      supported: true,
+      installed: true,
+      loggedIn: false,
+      delivered: r.ok,
+      ...r.error ? { error: r.error } : {}
+    });
+    return;
+  }
+  const action = rawAction;
+  const onEvent = (e) => {
+    if (e.kind === "awaiting_browser") {
+      emit2("coderabbit_progress", {
+        phase: "awaiting_browser",
+        authUrl: e.authUrl,
+        fallbackAuthUrl: e.fallbackAuthUrl
+      });
+    } else {
+      emit2("coderabbit_progress", { phase: e.kind });
+    }
+  };
+  const uploadCredential = token ? async (method, credential) => {
+    const r = await postLinkCredential({
+      agentId: "coderabbit",
+      sessionId: ctx.sessionId,
+      pluginId: ctx.pluginId,
+      pluginAuthToken: token,
+      method,
+      credential
+    });
+    return r.ok === true;
+  } : void 0;
+  if (action === "link_oauth") {
+    await ctx.relay.sendResult(cmd.id, "completed", {
+      action: "link_oauth",
+      supported: true,
+      installed: true,
+      loggedIn: false,
+      linked: false
+    });
+    void (async () => {
+      try {
+        const result2 = await configureCoderabbit({ action: "link_oauth" }, { onEvent, uploadCredential });
+        emit2("coderabbit_status", {
+          installed: result2.installed,
+          loggedIn: result2.loggedIn,
+          linked: result2.linked ?? false,
+          ...result2.error ? { error: result2.error } : {}
+        });
+      } catch (err) {
+        emit2("coderabbit_status", {
+          installed: false,
+          loggedIn: false,
+          linked: false,
+          error: err instanceof Error ? err.message : "CodeRabbit login failed"
+        });
+      }
+      await emitChain;
+    })();
+    return;
+  }
   const result = await configureCoderabbit(
     {
       action,
@@ -21145,28 +21305,8 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       review: { changeSet: parsed.changeSet, base: parsed.base, dir: parsed.reviewDir }
     },
     {
-      onEvent: (e) => {
-        if (e.kind === "awaiting_browser") {
-          emit2("coderabbit_progress", {
-            phase: "awaiting_browser",
-            authUrl: e.authUrl,
-            fallbackAuthUrl: e.fallbackAuthUrl
-          });
-        } else {
-          emit2("coderabbit_progress", { phase: e.kind });
-        }
-      },
-      uploadCredential: token ? async (method, credential) => {
-        const r = await postLinkCredential({
-          agentId: "coderabbit",
-          sessionId: ctx.sessionId,
-          pluginId: ctx.pluginId,
-          pluginAuthToken: token,
-          method,
-          credential
-        });
-        return r.ok === true;
-      } : void 0,
+      onEvent,
+      uploadCredential,
       runReview: (input) => new CoderabbitRuntimeStrategy(createOsStrategy()).runOneShot(input)
     }
   );
@@ -22416,7 +22556,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process23 = require("child_process");
+var import_node_child_process24 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -22429,7 +22569,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process23.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process24.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -22953,7 +23093,7 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 }
 
 // src/agents/kimi/installer.ts
-var import_node_child_process24 = require("child_process");
+var import_node_child_process25 = require("child_process");
 var import_node_os6 = require("os");
 var import_node_path6 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
@@ -22961,7 +23101,7 @@ function kimiBinDir() {
   return (0, import_node_path6.join)(process.env.KIMI_CODE_HOME || (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
-  const r = (0, import_node_child_process24.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
+  const r = (0, import_node_child_process25.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
 function augmentPath2() {
@@ -22971,7 +23111,7 @@ function augmentPath2() {
 }
 async function runInstaller2() {
   return new Promise((resolve7) => {
-    const proc = (0, import_node_child_process24.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
+    const proc = (0, import_node_child_process25.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
     proc.on("close", (code) => resolve7(code === 0));
     proc.on("error", () => resolve7(false));
   });
@@ -23708,7 +23848,7 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process25 = require("child_process");
+var import_node_child_process26 = require("child_process");
 var fs57 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os46 = __toESM(require("os"));
@@ -26333,7 +26473,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process25.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process26.spawn)(adapter.command, adapter.args, {
       cwd,
       // extraEnv (e.g. CLAUDE_CODE_DISABLE_1M_CONTEXT=1 on an on-demand
       // re-spawn) layers over process.env; PATH stays last so the augmented
@@ -34243,7 +34383,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.33" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.35" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -34442,7 +34582,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.33" : "unknown";
+  const v = true ? "2.60.35" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.60.33",
+  "version": "2.60.35",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",