codeam-cli 2.60.34 → 2.60.36

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.60.35] — 2026-07-10
+
+### Fixed
+
+- **cli:** CodeRabbit OAuth works headless (codespace/self-hosted) via a PTY + stdin token
+
+## [2.60.34] — 2026-07-10
+
+### Added
+
+- **cli:** CodeRabbit session-relay OAuth — deliver mobile-intercepted redirect to host loopback
+
 ## [2.60.33] — 2026-07-10
 
 ### Fixed

package/dist/index.js

@@ -5689,7 +5689,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.34" : "0.0.0-dev",
+    cliVersion: true ? "2.60.36" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5870,7 +5870,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.34",
+  version: "2.60.36",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6963,7 +6963,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.34" ? { ideVersion: "2.60.34" } : {}
+      ..."2.60.36" ? { ideVersion: "2.60.36" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -15413,16 +15413,16 @@ async function linkDryRunPreflight(ctx) {
 }
 
 // src/agents/coderabbit/configure.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var path36 = __toESM(require("path"));
 
 // src/agents/coderabbit/oauth.ts
+var import_node_child_process14 = require("child_process");
 var fs31 = __toESM(require("fs"));
-var http6 = __toESM(require("http"));
 var os27 = __toESM(require("os"));
 var path35 = __toESM(require("path"));
 function parseCoderabbitAuthEvent(line) {
-  const l = line.trim();
+  const l = line.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, "").trim();
   if (!l || l[0] !== "{") return null;
   let rec;
   try {
@@ -15456,8 +15456,64 @@ function parseCoderabbitAuthEvent(line) {
       return rec.status ? { kind: "other", status: rec.status } : null;
   }
 }
+function resolvePython() {
+  for (const bin of ["python3", "python"]) {
+    try {
+      const r = (0, import_node_child_process14.spawnSync)(bin, ["--version"], { stdio: "ignore", timeout: 4e3 });
+      if (!r.error && r.status === 0) return bin;
+    } catch {
+    }
+  }
+  return null;
+}
+function spawnCoderabbitLoginProc(cmd, args2) {
+  const python = resolvePython();
+  if (python) {
+    const helper = path35.join(os27.tmpdir(), "codeam-cr-pty.py");
+    fs31.writeFileSync(helper, PYTHON_PTY_HELPER, { mode: 420 });
+    return (0, import_node_child_process14.spawn)(python, [helper, cmd, ...args2], {
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env, TERM: "xterm-256color", COLUMNS: "220", LINES: "50" },
+      shell: false
+    });
+  }
+  return (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["pipe", "pipe", "pipe"], shell: false });
+}
+var pendingCoderabbitLogin = null;
+function setPendingCoderabbitLogin(handle) {
+  pendingCoderabbitLogin = handle;
+}
+function normalizeCoderabbitCallback(input) {
+  const s = (input ?? "").trim();
+  if (!s) return null;
+  if (/^coderabbit-cli:\/\/auth-callback/i.test(s) || /^http:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?\//i.test(s)) {
+    return s;
+  }
+  if (/^[A-Za-z0-9+/=]+$/.test(s) && s.length >= 40) {
+    try {
+      const decoded = Buffer.from(s, "base64").toString("utf8");
+      if (/^coderabbit-cli:\/\/auth-callback/i.test(decoded)) return decoded;
+    } catch {
+    }
+  }
+  return null;
+}
+function deliverPendingCoderabbitCallback(callbackUrl) {
+  const url = normalizeCoderabbitCallback(callbackUrl);
+  if (!url) return { ok: false, error: "not a CodeRabbit callback token/URL" };
+  if (!pendingCoderabbitLogin) {
+    return { ok: false, error: "no CodeRabbit login is awaiting a callback" };
+  }
+  try {
+    pendingCoderabbitLogin.deliver(url);
+    return { ok: true };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : "deliver failed" };
+  }
+}
 function runCoderabbitOAuthLogin(deps) {
   const timeoutMs = deps.timeoutMs ?? 18e4;
+  const spawnProc = deps.spawn ?? spawnCoderabbitLoginProc;
   return new Promise((resolve7) => {
     let settled = false;
     let stdout = "";
@@ -15466,6 +15522,7 @@ function runCoderabbitOAuthLogin(deps) {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
+      setPendingCoderabbitLogin(null);
       try {
         child.kill("SIGKILL");
       } catch {
@@ -15474,7 +15531,7 @@ function runCoderabbitOAuthLogin(deps) {
     };
     let child;
     try {
-      child = deps.spawn("coderabbit", ["auth", "login", "--agent"]);
+      child = spawnProc("coderabbit", ["auth", "login", "--agent"]);
     } catch (err) {
       resolve7({ ok: false, error: err instanceof Error ? err.message : "spawn failed" });
       return;
@@ -15487,7 +15544,14 @@ function runCoderabbitOAuthLogin(deps) {
       const e = parseCoderabbitAuthEvent(line);
       if (!e) return;
       deps.onEvent?.(e);
-      if (e.kind === "authenticated") {
+      if (e.kind === "awaiting_browser") {
+        setPendingCoderabbitLogin({
+          deliver: (callbackUrl) => {
+            child.stdin?.write(`${callbackUrl}
+`);
+          }
+        });
+      } else if (e.kind === "authenticated") {
         last = e;
         finish({ ok: true, user: e.user, authType: e.authType, provider: e.provider, org: e.org });
       } else if (e.kind === "failed") {
@@ -15550,38 +15614,10 @@ function diffCapturedCredential(before, home) {
     return null;
   }
 }
-function deliverLoopbackCallback(callbackUrl, opts = {}) {
-  return new Promise((resolve7) => {
-    let url;
-    try {
-      url = new URL(callbackUrl);
-    } catch {
-      resolve7({ ok: false, error: "invalid callback URL" });
-      return;
-    }
-    const host2 = url.hostname.replace(/^\[|\]$/g, "");
-    const isLoopback = url.protocol === "http:" && (host2 === "127.0.0.1" || host2 === "localhost" || host2 === "::1");
-    if (!isLoopback) {
-      resolve7({ ok: false, error: `refusing non-loopback callback host: ${url.hostname}` });
-      return;
-    }
-    const get3 = opts.get ?? http6.get;
-    const req = get3(url, { timeout: opts.timeoutMs ?? 1e4 }, (res) => {
-      res.resume();
-      const status2 = res.statusCode ?? 0;
-      resolve7({ ok: status2 >= 200 && status2 < 400, status: status2 });
-    });
-    req.on("timeout", () => {
-      req.destroy();
-      resolve7({ ok: false, error: "callback delivery timed out" });
-    });
-    req.on("error", (err) => resolve7({ ok: false, error: err.message }));
-  });
-}
 
 // src/agents/coderabbit/configure.ts
 function defaultIsLoggedIn() {
-  const r = (0, import_node_child_process14.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
+  const r = (0, import_node_child_process15.spawnSync)("coderabbit", ["auth", "status", "--agent"], {
     encoding: "utf8",
     timeout: 15e3
   });
@@ -15598,6 +15634,18 @@ function defaultIsLoggedIn() {
   }
   return false;
 }
+function defaultLoginWithApiKey(key) {
+  const r = (0, import_node_child_process15.spawnSync)("coderabbit", ["auth", "login", "--api-key", key], {
+    encoding: "utf8",
+    timeout: 3e4
+  });
+  const out2 = `${typeof r.stdout === "string" ? r.stdout : ""}${typeof r.stderr === "string" ? r.stderr : ""}`;
+  if (r.error) return { ok: false, error: r.error.message };
+  const failLine = out2.match(/API key authentication failed:[^\n]*/i);
+  if (failLine) return { ok: false, error: failLine[0].replace(/^[✗\s]+/, "").trim() };
+  if (r.status !== 0) return { ok: false, error: out2.trim() || "API key authentication failed" };
+  return { ok: true };
+}
 async function configureCoderabbit(input, deps = {}) {
   const os50 = deps.os ?? createOsStrategy();
   const ensureInstalled = deps.ensureInstalled ?? ensureCoderabbitInstalled;
@@ -15605,6 +15653,7 @@ async function configureCoderabbit(input, deps = {}) {
   const runOAuth = deps.runOAuthLogin ?? runCoderabbitOAuthLogin;
   const snapshot = deps.snapshotDir ?? (() => snapshotCredentialDir());
   const capture2 = deps.captureCredential ?? ((b) => diffCapturedCredential(b));
+  const loginWithApiKey = deps.loginWithApiKey ?? defaultLoginWithApiKey;
   const home = os50.homeDir();
   os50.augmentPath(
     os50.id === "win32" ? [
@@ -15630,8 +15679,22 @@ async function configureCoderabbit(input, deps = {}) {
     const res2 = base();
     const key = (input.apiKey ?? "").trim();
     if (!key) return { ...res2, error: "No API key provided" };
+    if (!res2.installed) {
+      const ok = await ensureInstalled(os50);
+      res2.installed = ok;
+      if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
+    }
+    const login = loginWithApiKey(key);
+    if (!login.ok) {
+      return { ...res2, loggedIn: false, linked: false, error: login.error ?? "Invalid or expired API key" };
+    }
     const stored = deps.uploadCredential ? await deps.uploadCredential("api_key", key) : false;
-    return { ...res2, linked: stored, error: stored ? void 0 : "Failed to store API key" };
+    return {
+      ...res2,
+      loggedIn: true,
+      linked: stored,
+      ...stored ? {} : { error: "Signed in, but storing the API key for reuse failed" }
+    };
   }
   if (input.action === "link_oauth") {
     const res2 = base();
@@ -15641,10 +15704,7 @@ async function configureCoderabbit(input, deps = {}) {
       if (!ok) return { ...res2, error: "CodeRabbit CLI could not be installed" };
     }
     const before = snapshot();
-    const login = await runOAuth({
-      spawn: (cmd, args2) => (0, import_node_child_process14.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] }),
-      onEvent: deps.onEvent
-    });
+    const login = await runOAuth({ onEvent: deps.onEvent });
     if (!login.ok) {
       return { ...res2, loggedIn: false, linked: false, error: login.error ?? "CodeRabbit login failed" };
     }
@@ -15691,7 +15751,7 @@ async function configureCoderabbit(input, deps = {}) {
 }
 
 // src/commands/host-agent.ts
-var import_node_child_process22 = require("child_process");
+var import_node_child_process23 = require("child_process");
 var os35 = __toESM(require("os"));
 var fs41 = __toESM(require("fs"));
 var path44 = __toESM(require("path"));
@@ -15704,7 +15764,7 @@ var path37 = __toESM(require("path"));
 // src/lib/restrict-to-owner.ts
 var import_node_fs5 = __toESM(require("fs"));
 var import_node_os4 = __toESM(require("os"));
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var BROAD_WINDOWS_SIDS = [
   "*S-1-1-0",
   "*S-1-5-11",
@@ -15716,7 +15776,7 @@ function restrictToOwner(filePath) {
   try {
     if (process.platform === "win32") {
       const username = import_node_os4.default.userInfo().username;
-      (0, import_node_child_process15.execFileSync)(
+      (0, import_node_child_process16.execFileSync)(
         "icacls",
         [
           filePath,
@@ -15978,9 +16038,9 @@ async function reportDeployProgress(auth, deployId, step, message, sessionId) {
 var fs34 = __toESM(require("fs"));
 var os30 = __toESM(require("os"));
 var path38 = __toESM(require("path"));
-var import_node_child_process16 = require("child_process");
+var import_node_child_process17 = require("child_process");
 var import_node_util4 = require("util");
-var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process16.execFile);
+var execFileP4 = (0, import_node_util4.promisify)(import_node_child_process17.execFile);
 function isAbsolutePathTarget(target) {
   return path38.isAbsolute(target);
 }
@@ -16276,7 +16336,7 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os31.homedir(
 }
 
 // src/commands/host/git-tooling.ts
-var import_node_child_process17 = require("child_process");
+var import_node_child_process18 = require("child_process");
 var fs36 = __toESM(require("fs"));
 var os32 = __toESM(require("os"));
 var path40 = __toESM(require("path"));
@@ -16390,7 +16450,7 @@ var defaultGitToolingRunner = {
   which(cmd) {
     try {
       const probe = process.platform === "win32" ? "where" : "which";
-      (0, import_node_child_process17.execFileSync)(probe, [cmd], { stdio: "ignore" });
+      (0, import_node_child_process18.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16398,7 +16458,7 @@ var defaultGitToolingRunner = {
   },
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
-      const child = (0, import_node_child_process17.spawn)(cmd, args2, {
+      const child = (0, import_node_child_process18.spawn)(cmd, args2, {
         stdio: [opts.input !== void 0 ? "pipe" : "ignore", "ignore", "pipe"]
       });
       let stderr = "";
@@ -16552,12 +16612,12 @@ var HeadroomStatsReporter = class {
 };
 
 // src/commands/host/os-packages.ts
-var import_node_child_process18 = require("child_process");
+var import_node_child_process19 = require("child_process");
 var PM_INSTALL_TIMEOUT_MS = 18e4;
 var defaultHeadroomRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process18.execFileSync)("which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process19.execFileSync)("which", [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -16566,7 +16626,7 @@ var defaultHeadroomRunner = {
   run(cmd, args2, opts = {}) {
     return new Promise((resolve7) => {
       const spawnEnv = opts.env ?? process.env;
-      const child = (0, import_node_child_process18.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
+      const child = (0, import_node_child_process19.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"], env: spawnEnv });
       let stderrBuf = "";
       let stdoutBuf = "";
       let settled = false;
@@ -17073,14 +17133,14 @@ async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner,
 }
 
 // src/commands/host/self-update.ts
-var import_node_child_process20 = require("child_process");
+var import_node_child_process21 = require("child_process");
 
 // src/lib/updateNotifier.ts
 var fs39 = __toESM(require("fs"));
 var os34 = __toESM(require("os"));
 var path43 = __toESM(require("path"));
 var https6 = __toESM(require("https"));
-var import_node_child_process19 = require("child_process");
+var import_node_child_process20 = require("child_process");
 var import_picocolors3 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
 var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
@@ -17174,7 +17234,7 @@ function notifyIfStale(currentVersion, latest) {
 }
 function isLinkedInstall() {
   try {
-    const root = (0, import_node_child_process19.execSync)("npm root -g", {
+    const root = (0, import_node_child_process20.execSync)("npm root -g", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 2e3
@@ -17202,7 +17262,7 @@ function maybeAutoUpdate(currentVersion, latest) {
 
 `
   );
-  const install = (0, import_node_child_process19.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
+  const install = (0, import_node_child_process20.spawnSync)("npm", ["install", "-g", `${PKG_NAME}@latest`], {
     stdio: "inherit",
     env: process.env
   });
@@ -17223,7 +17283,7 @@ function maybeAutoUpdate(currentVersion, latest) {
   process.stderr.write(`  ${import_picocolors3.default.green("\u2713")} Updated. Resuming session...
 
 `);
-  const child = (0, import_node_child_process19.spawnSync)("codeam", process.argv.slice(2), {
+  const child = (0, import_node_child_process20.spawnSync)("codeam", process.argv.slice(2), {
     stdio: "inherit",
     env: process.env
   });
@@ -17233,7 +17293,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.34" : null;
+  const current = true ? "2.60.36" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17250,7 +17310,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.34" : null;
+  const current = true ? "2.60.36" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17270,11 +17330,11 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.34" : null;
+  return true ? "2.60.36" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
-    (0, import_node_child_process20.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
+    (0, import_node_child_process21.execFile)(cmd, args2, { timeout: timeoutMs }, (err, stdout, stderr) => {
       const code = err && typeof err.code === "number" ? err.code : err ? null : 0;
       resolve7({ code, stdout: stdout ?? "", stderr: stderr ?? "" });
     });
@@ -17336,11 +17396,11 @@ async function runSelfUpdate() {
 }
 
 // src/commands/host/teardown.ts
-var import_node_child_process21 = require("child_process");
+var import_node_child_process22 = require("child_process");
 var fs40 = __toESM(require("fs"));
 var defaultDisableService = () => {
   try {
-    (0, import_node_child_process21.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
+    (0, import_node_child_process22.execFileSync)("systemctl", ["disable", "--now", "codeam-host-agent"], { stdio: "ignore" });
   } catch {
   }
 };
@@ -17348,7 +17408,7 @@ var defaultTeardownHeadroom = () => {
   try {
     const kind = JSON.parse(fs40.readFileSync(headroomConfigPath(), "utf8")).agent;
     if (kind) {
-      (0, import_node_child_process21.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+      (0, import_node_child_process22.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
     }
   } catch {
   }
@@ -17506,7 +17566,7 @@ var CONTROL_AGENT_META = {
   headroomWrappable: false,
   acp: false
 };
-var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process22.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: ["ignore", "pipe", "pipe"],
@@ -17986,7 +18046,7 @@ var HostAgentSupervisor = class {
   runAgentInstall(script) {
     return new Promise((resolve7) => {
       const home = process.env.HOME || os35.homedir();
-      const child = (0, import_node_child_process22.spawn)("sh", ["-c", script], {
+      const child = (0, import_node_child_process23.spawn)("sh", ["-c", script], {
         env: { ...process.env, HOME: home },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -21175,7 +21235,7 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
     );
   };
   if (rawAction === "link_deliver_callback") {
-    const r = await deliverLoopbackCallback(parsed.callbackUrl ?? "");
+    const r = deliverPendingCoderabbitCallback(parsed.callbackUrl ?? "");
     await ctx.relay.sendResult(cmd.id, r.ok ? "completed" : "failed", {
       action: "link_deliver_callback",
       supported: true,
@@ -21205,7 +21265,14 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       pluginId: ctx.pluginId,
       pluginAuthToken: token,
       method,
-      credential
+      credential,
+      // ⚠️ CodeRabbit is an IN-SESSION reviewer add-on — the link ALWAYS
+      // rides the user's REAL active session (codespace / self-hosted /
+      // local), never a throwaway `codeam link` pairing. Without this the
+      // backend `linkFromCli` treats the session as the disposable
+      // handshake session and DELETES it — the codespace vanished the
+      // instant the OAuth link completed (2026-07-10).
+      preserveSession: true
     });
     return r.ok === true;
   } : void 0;
@@ -22496,7 +22563,7 @@ async function pairAuto(args2) {
 }
 
 // src/services/headroom/wrap-launch.ts
-var import_node_child_process23 = require("child_process");
+var import_node_child_process24 = require("child_process");
 function wrapWithHeadroom(launch, opts) {
   if (!opts.enabled || !opts.headroomPresent) return launch;
   return {
@@ -22509,7 +22576,7 @@ var _present;
 function headroomPresent() {
   if (_present !== void 0) return Promise.resolve(_present);
   return new Promise((resolve7) => {
-    (0, import_node_child_process23.execFile)("headroom", ["--version"], (err) => {
+    (0, import_node_child_process24.execFile)("headroom", ["--version"], (err) => {
       _present = !err;
       resolve7(_present);
     });
@@ -23033,7 +23100,7 @@ async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
 }
 
 // src/agents/kimi/installer.ts
-var import_node_child_process24 = require("child_process");
+var import_node_child_process25 = require("child_process");
 var import_node_os6 = require("os");
 var import_node_path6 = require("path");
 var INSTALL_URL2 = "https://code.kimi.com/kimi-code/install.sh";
@@ -23041,7 +23108,7 @@ function kimiBinDir() {
   return (0, import_node_path6.join)(process.env.KIMI_CODE_HOME || (0, import_node_path6.join)((0, import_node_os6.homedir)(), ".kimi-code"), "bin");
 }
 function kimiRuns() {
-  const r = (0, import_node_child_process24.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
+  const r = (0, import_node_child_process25.spawnSync)("kimi", ["--version"], { stdio: "ignore", timeout: 15e3 });
   return !r.error && r.status === 0;
 }
 function augmentPath2() {
@@ -23051,7 +23118,7 @@ function augmentPath2() {
 }
 async function runInstaller2() {
   return new Promise((resolve7) => {
-    const proc = (0, import_node_child_process24.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
+    const proc = (0, import_node_child_process25.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL2} | bash`], { stdio: "inherit" });
     proc.on("close", (code) => resolve7(code === 0));
     proc.on("error", () => resolve7(false));
   });
@@ -23215,7 +23282,7 @@ var fs56 = __toESM(require("fs"));
 var path61 = __toESM(require("path"));
 var os45 = __toESM(require("os"));
 var https7 = __toESM(require("https"));
-var http7 = __toESM(require("http"));
+var http6 = __toESM(require("http"));
 var import_zod2 = require("zod");
 var historyRecordSchema = import_zod2.z.object({
   type: import_zod2.z.string().optional(),
@@ -23280,7 +23347,7 @@ function post(endpoint, body, pluginAuthToken) {
   return new Promise((resolve7) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE8}${endpoint}`);
-    const transport = u2.protocol === "https:" ? https7 : http7;
+    const transport = u2.protocol === "https:" ? https7 : http6;
     const req = transport.request(
       {
         hostname: u2.hostname,
@@ -23788,7 +23855,7 @@ var HistoryService = class _HistoryService {
 };
 
 // src/agents/acp/client.ts
-var import_node_child_process25 = require("child_process");
+var import_node_child_process26 = require("child_process");
 var fs57 = __toESM(require("fs/promises"));
 var fsSync = __toESM(require("fs"));
 var os46 = __toESM(require("os"));
@@ -26413,7 +26480,7 @@ var AcpClient = class {
       "acpClient",
       `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
     );
-    const child = (0, import_node_child_process25.spawn)(adapter.command, adapter.args, {
+    const child = (0, import_node_child_process26.spawn)(adapter.command, adapter.args, {
       cwd,
       // extraEnv (e.g. CLAUDE_CODE_DISABLE_1M_CONTEXT=1 on an on-demand
       // re-spawn) layers over process.env; PATH stays last so the augmented
@@ -26895,7 +26962,7 @@ var relaunchProxyWithoutBudget = async () => {
 };
 
 // src/services/streaming/transport.ts
-var http8 = __toESM(require("http"));
+var http7 = __toESM(require("http"));
 var https8 = __toESM(require("https"));
 var _transport4 = {
   post: _post3,
@@ -26905,7 +26972,7 @@ function _post3(url, headers, payload) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https8 : http8;
+    const lib = u2.protocol === "https:" ? https8 : http7;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -26947,7 +27014,7 @@ function _get(url, headers) {
   return new Promise((resolve7, reject) => {
     let settled = false;
     const u2 = new URL(url);
-    const lib = u2.protocol === "https:" ? https8 : http8;
+    const lib = u2.protocol === "https:" ? https8 : http7;
     const req = lib.request(
       {
         hostname: u2.hostname,
@@ -34323,7 +34390,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.34" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.36" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -34522,7 +34589,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.34" : "unknown";
+  const v = true ? "2.60.36" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.60.34",
+  "version": "2.60.36",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",