codeam-cli 2.60.35 → 2.60.37

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.60.35] — 2026-07-10
+
+### Fixed
+
+- **cli:** CodeRabbit OAuth works headless (codespace/self-hosted) via a PTY + stdin token
+
 ## [2.60.34] — 2026-07-10
 
 ### Added

package/dist/index.js

@@ -5689,7 +5689,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.60.35" : "0.0.0-dev",
+    cliVersion: true ? "2.60.37" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5870,7 +5870,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.60.35",
+  version: "2.60.37",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6963,7 +6963,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.60.35" ? { ideVersion: "2.60.35" } : {}
+      ..."2.60.37" ? { ideVersion: "2.60.37" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -13648,6 +13648,7 @@ function parseReview(stdout) {
 }
 
 // src/agents/coderabbit/runtime.ts
+var CODERABBIT_ONESHOT_TIMEOUT_MS = 5 * 6e4;
 var CoderabbitRuntimeStrategy = class {
   id = "coderabbit";
   meta = getAgent("coderabbit");
@@ -13697,11 +13698,47 @@ var CoderabbitRuntimeStrategy = class {
         env: { ...process.env, ...launch.env ?? {} },
         stdio: ["ignore", "pipe", "pipe"]
       });
+      let settled = false;
+      const finish = (out2) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        resolve7(out2);
+      };
+      const timer = setTimeout(() => {
+        if (settled) return;
+        try {
+          proc.kill("SIGTERM");
+        } catch {
+        }
+        setTimeout(() => {
+          try {
+            proc.kill("SIGKILL");
+          } catch {
+          }
+        }, 2e3).unref?.();
+        finish(
+          this.parseOutput({
+            exitCode: 124,
+            stdout: Buffer.concat(stdoutBuf).toString("utf8"),
+            stderr: Buffer.concat(stderrBuf).toString("utf8") + `
+CodeRabbit review timed out after ${Math.round(
+              CODERABBIT_ONESHOT_TIMEOUT_MS / 6e4
+            )} min and was terminated.`
+          })
+        );
+      }, CODERABBIT_ONESHOT_TIMEOUT_MS);
+      timer.unref?.();
       proc.stdout?.on("data", (b) => stdoutBuf.push(b));
       proc.stderr?.on("data", (b) => stderrBuf.push(b));
-      proc.on("error", (err) => reject(err));
+      proc.on("error", (err) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        reject(err);
+      });
       proc.on("close", (code) => {
-        resolve7(
+        finish(
           this.parseOutput({
             exitCode: code ?? 0,
             stdout: Buffer.concat(stdoutBuf).toString("utf8"),
@@ -17293,7 +17330,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.60.35" : null;
+  const current = true ? "2.60.37" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17310,7 +17347,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.60.35" : null;
+  const current = true ? "2.60.37" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17330,7 +17367,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.60.35" : null;
+  return true ? "2.60.37" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -21265,7 +21302,14 @@ var coderabbitConfigureH = async (ctx, cmd, parsed) => {
       pluginId: ctx.pluginId,
       pluginAuthToken: token,
       method,
-      credential
+      credential,
+      // ⚠️ CodeRabbit is an IN-SESSION reviewer add-on — the link ALWAYS
+      // rides the user's REAL active session (codespace / self-hosted /
+      // local), never a throwaway `codeam link` pairing. Without this the
+      // backend `linkFromCli` treats the session as the disposable
+      // handshake session and DELETES it — the codespace vanished the
+      // instant the OAuth link completed (2026-07-10).
+      preserveSession: true
     });
     return r.ok === true;
   } : void 0;
@@ -34383,7 +34427,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.60.35" : "0.0.0-dev";
+  const cliVersion = true ? "2.60.37" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -34582,7 +34626,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.60.35" : "unknown";
+  const v = true ? "2.60.37" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.60.35",
+  "version": "2.60.37",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",