codeam-cli 2.61.4 → 2.61.7

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.5] — 2026-07-16
+
+### Added
+
+- **cli:** ACP chrome-leak canary + detector (stability monitor, part 2)
+- **ci:** Canary seeds onboarding + auths via in-house MiniMax backend
+
+### Fixed
+
+- **ci:** Canary auths by subscription (CLAUDE_CODE_OAUTH_TOKEN), not API key
+- **cli:** Stop the changeset reporter from spamming install/SDK files
+
+## [2.61.4] — 2026-07-16
+
+### Fixed
+
+- **box:** Add unzip for CodeRabbit install (curl alone insufficient)
+- **cli:** Bump ACP stack to latest + freeze claude binary (broken-chat fix)
+
 ## [2.61.3] — 2026-07-16
 
 ### Fixed

package/dist/index.js

@@ -1073,11 +1073,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path75) {
+function rmIfExistsQuiet(path76) {
   try {
-    fs2.rmSync(path75, { force: true });
+    fs2.rmSync(path76, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path75}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path76}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -1261,8 +1261,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path75) {
-  return path75.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path76) {
+  return path76.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3742,9 +3742,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path75, ranges, output) {
+function getContextLinesFromFile(path76, ranges, output) {
   return new Promise((resolve8) => {
-    const stream = (0, import_node_fs.createReadStream)(path75);
+    const stream = (0, import_node_fs.createReadStream)(path76);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3759,7 +3759,7 @@ function getContextLinesFromFile(path75, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path75, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path76, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3820,8 +3820,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path75) {
-  return path75.startsWith("node:") || path75.endsWith(".min.js") || path75.endsWith(".min.cjs") || path75.endsWith(".min.mjs") || path75.startsWith("data:");
+function shouldSkipContextLinesForFile(path76) {
+  return path76.startsWith("node:") || path76.endsWith(".min.js") || path76.endsWith(".min.cjs") || path76.endsWith(".min.mjs") || path76.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5975,7 +5975,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.4" : "0.0.0-dev",
+    cliVersion: true ? "2.61.7" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6156,7 +6156,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.4",
+  version: "2.61.7",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6225,7 +6225,7 @@ var package_default = {
     url: "https://github.com/sponsors/edgar-durand"
   },
   engines: {
-    node: ">=20.0.0"
+    node: ">=22.0.0"
   },
   dependencies: {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",
@@ -7299,7 +7299,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.4" ? { ideVersion: "2.61.4" } : {}
+      ..."2.61.7" ? { ideVersion: "2.61.7" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -13885,8 +13885,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path75 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path75) return null;
+  const path76 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path76) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -13903,7 +13903,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path75.trim(),
+    path: path76.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -13986,10 +13986,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path75, lineNo, sevToken, message] = m;
-    if (!path75 || !lineNo || !message) continue;
+    const [, path76, lineNo, sevToken, message] = m;
+    if (!path76 || !lineNo || !message) continue;
     hunks.push({
-      path: path75.trim(),
+      path: path76.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -17900,7 +17900,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.4" : null;
+  const current = true ? "2.61.7" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17917,7 +17917,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.4" : null;
+  const current = true ? "2.61.7" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17937,7 +17937,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.4" : null;
+  return true ? "2.61.7" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18254,6 +18254,12 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.s
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
+var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1]], {
+  cwd,
+  env: { ...process.env, ...env, CODEAM_AUTO_APPROVE: "1" },
+  stdio: ["ignore", "pipe", "pipe"],
+  detached: false
+});
 var defaultOnIdentityRejected = () => {
   deleteHostIdentity();
   log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
@@ -18268,6 +18274,7 @@ var HostAgentSupervisor = class {
     this.identity = identity;
     this.deps = deps;
     this.spawnChild = deps.spawnChild ?? defaultSpawner;
+    this.resumeSpawner = deps.resumeSpawner ?? defaultResumeSpawner;
     this.resolveAgentAuth = deps.resolveAgentAuth ?? unsealAgentAuth;
     this.setupHeadroom = deps.setupHeadroom ?? setupHeadroomForSelfHosted;
     this.isHeadroomInstalled = deps.isHeadroomInstalled ?? (() => defaultHeadroomRunner.which("headroom"));
@@ -18284,6 +18291,7 @@ var HostAgentSupervisor = class {
   deps;
   children = /* @__PURE__ */ new Map();
   spawnChild;
+  resumeSpawner;
   resolveAgentAuth;
   setupHeadroom;
   /** Probe whether Headroom is already installed (defaults to `which headroom`). */
@@ -18344,6 +18352,7 @@ var HostAgentSupervisor = class {
     void this.beat();
     this.heartbeatTimer = setInterval(() => void this.beat(), HEARTBEAT_INTERVAL_MS);
     this.heartbeatTimer.unref?.();
+    this.resumePersistedSession();
     void reportSessionEvent(
       { hostId: this.identity.hostId, hostToken: this.identity.hostToken },
       { event: "reconcile", activeDeployIds: this.activeSessions().map((s) => s.id) }
@@ -18933,6 +18942,60 @@ var HostAgentSupervisor = class {
   spawnSessionChild(env, cwd, args2 = []) {
     return this.spawnChild({ ...env, ...readHeadroomChildEnv() }, cwd, args2);
   }
+  /**
+   * Auto-resume the user's last active session on supervisor boot (2026-07-16
+   * churn fix). Before this, a restart / self-update killed the session child
+   * and never re-spawned it — the session lost its heartbeat, went "CLI
+   * disconnected", and the user had to reconnect by hand (churn right after an
+   * update). Spawn bare `codeam` via the resume spawner (reconnects the SAME
+   * pluginId via start(), then heartbeats) so the session comes back on its own
+   * in its ORIGINAL ACP shape (self-hosted/codespace = ACP-only; the resume
+   * spawner sets CODEAM_AUTO_APPROVE=1 to keep the local baton/native-TUI OFF).
+   *
+   * Best-effort + guarded: no-op when there's no persisted session, when the
+   * persisted session lacks the reconnect material (pluginId + pollSecret +
+   * agent), or when a fresh deploy already owns a child this boot.
+   */
+  resumePersistedSession() {
+    try {
+      if (this.children.size > 0) return;
+      const session = getActiveSession();
+      if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
+      const cwd = process.cwd();
+      const proc = this.resumeSpawner({ ...readHeadroomChildEnv() }, cwd);
+      const child = {
+        deployId: session.id,
+        proc,
+        agent: session.agent,
+        startedAt: Date.now()
+      };
+      this.children.set(session.id, child);
+      let tail = "";
+      const appendTail = (buf) => {
+        tail = (tail + buf.toString("utf8")).slice(-2e3);
+      };
+      proc.stdout?.on("data", appendTail);
+      proc.stderr?.on("data", appendTail);
+      proc.once("exit", (code) => {
+        if (this.children.get(session.id)?.proc === proc) this.children.delete(session.id);
+        if (typeof code === "number" && code !== 0) {
+          log.warn(
+            "host-agent",
+            `resumed session ${session.id.slice(0, 8)} exited (${code}): ${tail.trim().slice(-300)}`
+          );
+        }
+      });
+      log.info(
+        "host-agent",
+        `resumed session ${session.id.slice(0, 8)} pluginId=${session.pluginId.slice(0, 12)} (ACP)`
+      );
+    } catch (err) {
+      log.warn(
+        "host-agent",
+        `resume persisted session failed (best-effort): ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
   /**
    * Run the backend-supplied per-agent CLI install script (e.g.
    * `claude.ai/install.sh`, `npm i -g @openai/codex`). Best-effort + bounded:
@@ -23396,11 +23459,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path75 = fileFlag.slice("--token-file=".length);
+    const path76 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs56.readFileSync(path75, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path75} is empty`);
-      rmIfExistsQuiet(path75);
+      const content = fs56.readFileSync(path76, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path76} is empty`);
+      rmIfExistsQuiet(path76);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -30442,8 +30505,67 @@ var import_crypto5 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
 var import_child_process28 = require("child_process");
-var fs61 = __toESM(require("fs/promises"));
+var fs62 = __toESM(require("fs/promises"));
+var path67 = __toESM(require("path"));
+
+// src/services/turn-files/review-ignore.ts
+var import_ignore2 = __toESM(require("ignore"));
+var fs61 = __toESM(require("fs"));
 var path66 = __toESM(require("path"));
+var CURATED_REVIEW_IGNORE = [
+  // Google Cloud SDK (the incident) — installs a huge python tree.
+  "google-cloud-sdk/",
+  "**/google-cloud-sdk/**",
+  ".config/gcloud/",
+  // Python package installs that land outside a venv (which is already covered).
+  "**/site-packages/**",
+  "**/dist-packages/**",
+  "__pypackages__/",
+  ".local/lib/",
+  "**/.local/lib/**",
+  "pip-wheel-metadata/",
+  // JS package-manager stores/caches not already in isIgnoredFilePath's regex.
+  ".pnpm-store/",
+  "**/.pnpm-store/**",
+  ".yarn/cache/",
+  ".yarn/unplugged/",
+  ".bun/",
+  // Language toolchains dropped into $HOME/a project dir.
+  ".rustup/",
+  ".cargo/registry/",
+  ".cargo/git/",
+  "go/pkg/",
+  ".nvm/",
+  ".rbenv/",
+  ".pyenv/",
+  ".sdkman/",
+  // Cloud / infra CLIs with bundled trees.
+  ".azure/",
+  ".aws/cli/",
+  "awscli/",
+  // CodeAgent's own runtime prefixes (never a user change).
+  ".codeam/",
+  "codeam-node20/"
+];
+function makeReviewIgnore(repoRoot) {
+  const ig = (0, import_ignore2.default)().add(CURATED_REVIEW_IGNORE);
+  try {
+    const custom = fs61.readFileSync(path66.join(repoRoot, ".codeam", "reviewignore"), "utf8");
+    ig.add(custom);
+  } catch {
+  }
+  return (relPath) => {
+    if (!relPath) return false;
+    try {
+      return ig.ignores(relPath);
+    } catch (err) {
+      log.trace("review-ignore", `ignores() threw for "${relPath}"`, err);
+      return false;
+    }
+  };
+}
+
+// src/services/turn-files/git-changeset.ts
 async function collectRepoChangeset(opts) {
   const status2 = await runGit3(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
   if (status2 === null) return null;
@@ -30454,14 +30576,26 @@ async function collectRepoChangeset(opts) {
     "HEAD"
   ]).catch(() => null);
   const numstat = parseNumstat(numstatRaw ?? "");
+  const reviewIgnore = makeReviewIgnore(opts.repoRoot);
+  const rows = parseStatus(status2).filter(
+    (row) => !isIgnoredFilePath(row.filePath) && !reviewIgnore(row.filePath)
+  );
+  const MAX_CHANGESET_FILES = Math.max(1, Number(process.env.CODEAM_MAX_CHANGESET_FILES ?? 500));
+  const truncated = rows.length > MAX_CHANGESET_FILES;
+  const bounded = truncated ? rows.slice(0, MAX_CHANGESET_FILES) : rows;
+  if (truncated) {
+    log.warn(
+      "changeset",
+      `${rows.length} changed files exceeds the ${MAX_CHANGESET_FILES}-file cap \u2014 reporting the first ${MAX_CHANGESET_FILES} only. This usually means a dependency/SDK/build install landed in the session's working directory; add it to .gitignore to remove it from reviews.`
+    );
+  }
   const entries = [];
-  for (const row of parseStatus(status2)) {
-    if (isIgnoredFilePath(row.filePath)) continue;
+  for (const row of bounded) {
     const numstatEntry = numstat.get(row.filePath);
     let stats;
-    if (row.fileStatus === "added" && numstatEntry === void 0) {
+    if (!truncated && row.fileStatus === "added" && numstatEntry === void 0) {
       const lineCount = await readUntrackedLineCount(
-        path66.join(opts.repoRoot, row.filePath)
+        path67.join(opts.repoRoot, row.filePath)
       );
       stats = { added: lineCount, removed: 0 };
     } else {
@@ -30492,7 +30626,7 @@ function readUntrackedLineCount(absPath) {
 }
 async function defaultReadUntrackedLineCount(absPath) {
   try {
-    const content = await fs61.readFile(absPath, "utf8");
+    const content = await fs62.readFile(absPath, "utf8");
     let count = 0;
     let pos = -1;
     while ((pos = content.indexOf("\n", pos + 1)) !== -1) {
@@ -30584,7 +30718,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs66 = await import("fs/promises");
+  const fs67 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -30592,7 +30726,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs66.readdir(dir, { withFileTypes: true });
+      const dirents = await fs67.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -30603,8 +30737,8 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (hasGit) {
       out2.push({
         repoRoot: dir,
-        repoPath: path66.relative(workingDir, dir),
-        repoName: path66.basename(dir)
+        repoPath: path67.relative(workingDir, dir),
+        repoName: path67.basename(dir)
       });
       return;
     }
@@ -30612,14 +30746,14 @@ async function discoverRepos(workingDir, maxDepth = 4) {
       if (!entry.isDirectory) continue;
       if (entry.name === "node_modules") continue;
       if (entry.name === "dist" || entry.name === "build") continue;
-      await walk(path66.join(dir, entry.name), depth + 1);
+      await walk(path67.join(dir, entry.name), depth + 1);
     }
   }
 }
 
 // src/services/turn-files/files-outbox.ts
-var fs62 = __toESM(require("fs/promises"));
-var path67 = __toESM(require("path"));
+var fs63 = __toESM(require("fs/promises"));
+var path68 = __toESM(require("path"));
 var import_os11 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
@@ -30652,16 +30786,16 @@ var FilesOutbox = class {
   backoffIndex = 0;
   stopped = false;
   constructor(opts) {
-    const base = opts.baseDir ?? path67.join(homeDir(), HOME_OUTBOX_DIR);
-    this.filePath = path67.join(base, `${opts.sessionId}.jsonl`);
+    const base = opts.baseDir ?? path68.join(homeDir(), HOME_OUTBOX_DIR);
+    this.filePath = path68.join(base, `${opts.sessionId}.jsonl`);
     this.post = opts.post;
     this.autoSchedule = opts.autoSchedule !== false;
   }
   /** Persist the entry to disk and trigger a flush. Returns once the
    *  line is durable on disk (not once the POST succeeds). */
   async enqueue(entry) {
-    await fs62.mkdir(path67.dirname(this.filePath), { recursive: true });
-    await fs62.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
+    await fs63.mkdir(path68.dirname(this.filePath), { recursive: true });
+    await fs63.appendFile(this.filePath, JSON.stringify(entry) + "\n", "utf8");
     this.backoffIndex = 0;
     if (this.autoSchedule) this.scheduleFlush(0);
   }
@@ -30752,7 +30886,7 @@ var FilesOutbox = class {
   async readAll() {
     let raw = "";
     try {
-      raw = await fs62.readFile(this.filePath, "utf8");
+      raw = await fs63.readFile(this.filePath, "utf8");
     } catch {
       return [];
     }
@@ -30776,12 +30910,12 @@ var FilesOutbox = class {
   async rewrite(entries) {
     const tmpPath = `${this.filePath}.${process.pid}.tmp`;
     if (entries.length === 0) {
-      await fs62.unlink(this.filePath).catch(() => void 0);
+      await fs63.unlink(this.filePath).catch(() => void 0);
       return;
     }
     const payload = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    await fs62.writeFile(tmpPath, payload, "utf8");
-    await fs62.rename(tmpPath, this.filePath);
+    await fs63.writeFile(tmpPath, payload, "utf8");
+    await fs63.rename(tmpPath, this.filePath);
   }
 };
 function applyJitter(ms) {
@@ -33942,7 +34076,7 @@ var AcpDriver = class {
 };
 
 // src/baton/transcript-mirror.ts
-var fs63 = __toESM(require("fs"));
+var fs64 = __toESM(require("fs"));
 var TranscriptMirror = class {
   constructor(deps) {
     this.deps = deps;
@@ -34009,7 +34143,7 @@ var TranscriptMirror = class {
   }
 };
 function defaultWatch(file, onChange) {
-  const w3 = fs63.watch(file, { persistent: false }, () => onChange());
+  const w3 = fs64.watch(file, { persistent: false }, () => onChange());
   return () => w3.close();
 }
 
@@ -34271,16 +34405,16 @@ function toEpochMs(ts) {
 }
 
 // src/agents/claude/onboarding.ts
-var fs64 = __toESM(require("fs"));
+var fs65 = __toESM(require("fs"));
 var os50 = __toESM(require("os"));
-var path68 = __toESM(require("path"));
+var path69 = __toESM(require("path"));
 var ONBOARDING_VERSION_SENTINEL = "9999.0.0";
 function ensureClaudeOnboarded(cwd) {
   try {
-    const file = path68.join(os50.homedir(), ".claude.json");
+    const file = path69.join(os50.homedir(), ".claude.json");
     let config = {};
     try {
-      config = JSON.parse(fs64.readFileSync(file, "utf8"));
+      config = JSON.parse(fs65.readFileSync(file, "utf8"));
     } catch {
     }
     let changed = false;
@@ -34305,8 +34439,8 @@ function ensureClaudeOnboarded(cwd) {
       }
     }
     if (!changed) return;
-    fs64.mkdirSync(path68.dirname(file), { recursive: true });
-    fs64.writeFileSync(file, JSON.stringify(config, null, 2));
+    fs65.mkdirSync(path69.dirname(file), { recursive: true });
+    fs65.writeFileSync(file, JSON.stringify(config, null, 2));
     log.info(
       "claude",
       `pre-completed Claude onboarding${cwd ? ` + trusted workspace ${cwd}` : ""}`
@@ -34992,7 +35126,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 var import_child_process29 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors9 = __toESM(require("picocolors"));
-var path69 = __toESM(require("path"));
+var path70 = __toESM(require("path"));
 var execFileP6 = (0, import_util4.promisify)(import_child_process29.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -35481,7 +35615,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path69.posix.dirname(remotePath);
+    const remoteDir = path70.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -35551,7 +35685,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process30 = require("child_process");
 var import_util5 = require("util");
-var path70 = __toESM(require("path"));
+var path71 = __toESM(require("path"));
 var import_picocolors10 = __toESM(require("picocolors"));
 var execFileP7 = (0, import_util5.promisify)(import_child_process30.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -35791,7 +35925,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path70.posix.dirname(remotePath);
+    const remoteDir = path71.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -35827,7 +35961,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process31 = require("child_process");
 var import_util6 = require("util");
-var path71 = __toESM(require("path"));
+var path72 = __toESM(require("path"));
 var execFileP8 = (0, import_util6.promisify)(import_child_process31.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -36087,7 +36221,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path71.posix.dirname(remotePath);
+    const remoteDir = path72.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -36155,7 +36289,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process32 = require("child_process");
 var import_util7 = require("util");
-var path72 = __toESM(require("path"));
+var path73 = __toESM(require("path"));
 var execFileP9 = (0, import_util7.promisify)(import_child_process32.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -36391,7 +36525,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path72.posix.dirname(remotePath);
+    const remoteDir = path73.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -37037,8 +37171,8 @@ async function invite() {
 var import_node_dns = require("dns");
 var import_node_util5 = require("util");
 var import_node_crypto12 = require("crypto");
-var fs65 = __toESM(require("fs"));
-var path73 = __toESM(require("path"));
+var fs66 = __toESM(require("fs"));
+var path74 = __toESM(require("path"));
 var import_picocolors14 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util5.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase2) {
@@ -37094,13 +37228,13 @@ async function checkHealth(apiBase2) {
   }
 }
 function checkConfigDir() {
-  const dir = path73.join(require("os").homedir(), ".codeam");
+  const dir = path74.join(require("os").homedir(), ".codeam");
   try {
-    fs65.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path73.join(dir, ".doctor-probe");
-    fs65.writeFileSync(probe, "ok", { mode: 384 });
-    const read2 = fs65.readFileSync(probe, "utf8");
-    fs65.unlinkSync(probe);
+    fs66.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path74.join(dir, ".doctor-probe");
+    fs66.writeFileSync(probe, "ok", { mode: 384 });
+    const read2 = fs66.readFileSync(probe, "utf8");
+    fs66.unlinkSync(probe);
     if (read2 !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -37164,7 +37298,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path73.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path74.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -37206,7 +37340,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.4" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.7" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -37717,7 +37851,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.4" : "unknown";
+  const v = true ? "2.61.7" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.4",
+  "version": "2.61.7",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -69,7 +69,7 @@
     "url": "https://github.com/sponsors/edgar-durand"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "dependencies": {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",