codeam-cli 2.75.1 → 2.75.3

package/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.2] — 2026-09-15
+
+### Added
+
+- **shared:** Declare the credits_changed user event
+
+### CI
+
+- **release:** Wait up to 7.5 min for npm to serve the published version (#754)
+
+### Fixed
+
+- **cli:** A managed-rail outage must never be blamed on Anthropic (#757)
+
+## [2.75.1] — 2026-09-12
+
+### Fixed
+
+- **cli:** Managed sessions announce the managed agent, not the Claude Code runtime (#753)
+
 ## [2.75.0] — 2026-09-12
 
 ### Added

package/dist/index.js

@@ -271,8 +271,8 @@ var init_stdio_proxy = __esm({
       }
       async spawnChild(stdout, preResolved) {
         const spec = preResolved ?? await this.opts.spawnSpec();
-        const spawn48 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
-        const child = spawn48(spec.command, spec.args, {
+        const spawn49 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
+        const child = spawn49(spec.command, spec.args, {
           env: { ...process.env, ...spec.env },
           // env only — never argv
           stdio: ["pipe", "pipe", "inherit"]
@@ -300,7 +300,9 @@ var convex_admin_mcp_exports = {};
 __export(convex_admin_mcp_exports, {
   callConvexTool: () => callConvexTool,
   deploymentNameFromKey: () => deploymentNameFromKey,
-  runConvexAdminMcp: () => runConvexAdminMcp
+  resolveConvexBin: () => resolveConvexBin,
+  runConvexAdminMcp: () => runConvexAdminMcp,
+  runConvexDeploy: () => runConvexDeploy
 });
 function deploymentNameFromKey(key) {
   const prefix = key.split("|")[0];
@@ -310,6 +312,81 @@ function deploymentNameFromKey(key) {
   }
   return null;
 }
+function defaultSpawn(timeoutMs) {
+  return (cmd, args2, opts) => new Promise((resolve11) => {
+    let out2 = "";
+    let err = "";
+    let done = false;
+    const finish = (code) => {
+      if (done) return;
+      done = true;
+      resolve11({ code, stdout: out2, stderr: err });
+    };
+    let child;
+    try {
+      child = (0, import_node_child_process34.spawn)(cmd, args2, { cwd: opts.cwd, env: opts.env, stdio: ["ignore", "pipe", "pipe"] });
+    } catch (e) {
+      finish(1);
+      err = e instanceof Error ? e.message : String(e);
+      return;
+    }
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      err += `
+[codeam] convex deploy timed out after ${Math.round(timeoutMs / 1e3)}s`;
+      finish(124);
+    }, timeoutMs);
+    child.stdout?.on("data", (c2) => {
+      out2 += c2.toString();
+    });
+    child.stderr?.on("data", (c2) => {
+      err += c2.toString();
+    });
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      err += (err ? "\n" : "") + e.message;
+      finish(1);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      finish(code ?? 1);
+    });
+  });
+}
+function resolveConvexBin(cwd) {
+  const local = path95.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
+  if (fs83.existsSync(local)) return { cmd: local, args: [] };
+  return { cmd: "npx", args: ["--yes", "convex"] };
+}
+function redact(text, key) {
+  if (!key) return text;
+  return text.split(key).join("***");
+}
+async function runConvexDeploy(key, args2, opts = {}) {
+  const cwd = args2.projectDir ?? opts.cwd ?? process.cwd();
+  const timeoutMs = opts.timeoutMs ?? 3e5;
+  const run = opts.spawnImpl ?? defaultSpawn(timeoutMs);
+  const bin = resolveConvexBin(cwd);
+  const argv = [...bin.args, "deploy"];
+  if (args2.previewName) argv.push("--preview-create", String(args2.previewName));
+  const { code, stdout, stderr } = await run(bin.cmd, argv, {
+    cwd,
+    // The ONLY place the secret travels.
+    env: { ...process.env, CONVEX_DEPLOY_KEY: key }
+  });
+  const body = redact([stdout, stderr].filter(Boolean).join("\n").trim(), key);
+  if (code === 0) {
+    return { ok: true, text: body || "Convex deploy completed." };
+  }
+  return {
+    ok: false,
+    text: `Convex deploy failed (exit ${code}).
+${body}`
+  };
+}
 async function adminQuery(baseUrl, key, api, body, fetchImpl = fetch) {
   const res = await fetchImpl(`${baseUrl}/api/${api}`, {
     method: "POST",
@@ -320,7 +397,24 @@ async function adminQuery(baseUrl, key, api, body, fetchImpl = fetch) {
   const ok = res.ok && !/"status"\s*:\s*"error"/.test(text);
   return { ok, text };
 }
-async function callConvexTool(baseUrl, key, tool, args2, fetchImpl = fetch) {
+async function callConvexTool(baseUrl, key, tool, args2, fetchImpl = fetch, deployOpts = {}) {
+  switch (tool) {
+    case "deploy":
+      return runConvexDeploy(
+        key,
+        {
+          projectDir: typeof args2.projectDir === "string" ? args2.projectDir : void 0,
+          previewName: typeof args2.previewName === "string" ? args2.previewName : void 0
+        },
+        deployOpts
+      );
+  }
+  if (!baseUrl) {
+    return {
+      ok: false,
+      text: `The connected Convex deploy key is a PROJECT key, which names no single deployment, so '${tool}' (and the other data tools) cannot reach one. Use the 'deploy' tool \u2014 it resolves the target from the key itself \u2014 or reconnect Convex with a dev/prod deploy key (Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys) to enable the data tools.`
+    };
+  }
   switch (tool) {
     case "tables":
       return adminQuery(baseUrl, key, "query", {
@@ -362,12 +456,11 @@ async function runConvexAdminMcp(client3, id) {
   const name = deploymentNameFromKey(key);
   if (!name) {
     process.stderr.write(
-      `[codeam mcp-run convex] could not derive a deployment from the deploy key (expected a dev/prod deploy key like dev:name|\u2026 \u2014 got prefix "${key.split(":")[0]}"). Generate a deploy key at Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys.
+      `[codeam mcp-run convex] the deploy key names no single deployment (prefix "${key.split(":")[0]}"): the data tools are unavailable, 'deploy' still works. For the data tools, reconnect with a dev/prod deploy key (Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys).
 `
     );
-    process.exit(1);
   }
-  const baseUrl = `https://${name}.convex.cloud`;
+  const baseUrl = name ? `https://${name}.convex.cloud` : "";
   const { Server } = await import("@modelcontextprotocol/sdk/server/index.js");
   const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
   const { ListToolsRequestSchema, CallToolRequestSchema } = await import("@modelcontextprotocol/sdk/types.js");
@@ -396,10 +489,13 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var TOOLS;
+var import_node_child_process34, fs83, path95, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
+    import_node_child_process34 = require("child_process");
+    fs83 = __toESM(require("fs"));
+    path95 = __toESM(require("path"));
     TOOLS = [
       {
         name: "tables",
@@ -449,6 +545,24 @@ var init_convex_admin_mcp = __esm({
           required: ["functionPath"],
           additionalProperties: false
         }
+      },
+      {
+        name: "deploy",
+        description: 'Deploy this repo\'s `convex/` functions, schema and indexes to the Convex deployment this integration is connected to. Use this after editing anything under `convex/` \u2014 a function you just wrote does NOT exist for the running app until it is deployed ("Could not find public function for ..." means exactly this). Do NOT run `npx convex deploy` or `npx convex dev` in the shell: those need an interactive login, and this tool already holds the credential.',
+        inputSchema: {
+          type: "object",
+          properties: {
+            projectDir: {
+              type: "string",
+              description: "Repo root holding the `convex/` directory. Defaults to the session cwd."
+            },
+            previewName: {
+              type: "string",
+              description: "Only for a PREVIEW deploy key: name the preview deployment to create (e.g. a branch name)."
+            }
+          },
+          additionalProperties: false
+        }
       }
     ];
   }
@@ -889,12 +1003,34 @@ var AGENT_REGISTRY = {
     displayName: "Gemini CLI",
     binaryName: "gemini",
     enabled: true,
-    // OAuth via `gemini auth login` (captured by `codeam link gemini`
-    // from ~/.gemini/oauth_creds.json) AND GEMINI_API_KEY are both
-    // accepted by the backend's GeminiProvisioningStrategy and propagated
-    // into codespace deploys.
-    supportedAuthKinds: ["oauth_token", "api_key"],
-    preferredAuthKind: "oauth_token",
+    // ⚠️ API KEY ONLY since 2026-06-18, when Google stopped Gemini CLI (and the
+    // Gemini Code Assist IDE extensions) serving requests for AI Pro, AI Ultra
+    // and free users, in the move to Antigravity CLI. Its announcement is
+    // explicit about what survives: "Gemini CLI will remain accessible via paid
+    // Gemini and Gemini Enterprise Agent Platform API keys."
+    //
+    // So the agent stays — `@google/gemini-cli` is NOT deprecated, it still
+    // ships weekly — but the OAuth door has to go: it captures a
+    // `~/.gemini/oauth_creds.json` from a CONSUMER Google account, which is
+    // exactly the tier that no longer serves requests. We used to PREFER that
+    // path, so it was the one we recommended first; on 2026-09-15 prod held 63
+    // Gemini links, 46 of them OAuth, 19 created after 2026-09-01 and the
+    // newest that same day. Three months of sending people through a bricked
+    // door — each one landing on `isGeminiIneligibleTier` at first use.
+    //
+    // ⚠️ Antigravity CLI is NOT a drop-in replacement for us: no official ACP
+    // mode (google-antigravity/antigravity-cli#31 open, 192 comments, zero
+    // `acp` hits in the repo as of 2026-09-15), and every third-party ACP
+    // adapter warns that driving `agy` that way matches what Google's FAQ calls
+    // a ToS violation — risking the USER's Google account. Our whole Gemini
+    // path is ACP, so adopting it would mean shipping that risk. Revisit only
+    // when #31 ships an official mode.
+    //
+    // Existing OAuth rows are NOT migrated: `supportedAuthMethods` gates the
+    // LINK call only, so the 46 stay readable and simply keep failing at the
+    // provider, where the ineligible-tier message already explains why.
+    supportedAuthKinds: ["api_key"],
+    preferredAuthKind: "api_key",
     // Not listed by `headroom wrap --help` — runs native.
     headroomWrappable: false,
     // Native ACP server: `gemini --skip-trust --acp`.
@@ -2058,6 +2194,16 @@ var INTEGRATION_REGISTRY = {
     // tools ourselves via a BUILT-IN MCP (delivery.builtin) against that admin
     // API — see apps/cli/src/integrations/convex-admin-mcp.ts. The user still
     // pastes a deploy key (Dashboard → Project Settings → Deploy Keys).
+    //
+    // ⚠️ That built-in ALSO owns `deploy`, and it is the only way an agent can
+    // push `convex/` changes. Deploying is bundle + push, not a REST call, so
+    // that one tool drives Convex's own CLI with the deploy key injected into
+    // THAT CHILD's env — the agent's shell never sees the credential. Before
+    // it existed the agent had the credential's power through the MCP but no
+    // way to deploy, so it looped on `npx convex dev` (interactive login) and
+    // asked the user to paste the token into the chat; the user ended up
+    // re-entering the SAME key by hand in Environment Variables, after burning
+    // real credits (2026-09-15).
     enabled: true,
     auth: {
       kind: "api_key",
@@ -3059,7 +3205,13 @@ var USER_EVENTS = {
    *  pipeline transition (stage start/done, pause, stall, completion). CLI
    *  posts to /api/packs/events; mobile's pack.store renders the pipeline.
    *  Mirrored in repo A's app-shared events.ts. */
-  PACK_STATE: "pack_state"
+  PACK_STATE: "pack_state",
+  /** The prepaid credit balance moved by something the client could not have
+   *  predicted — a purchase landing, a refund, a grant. Carries the new
+   *  balance, so nothing has to be fetched to render it. ⚠️ NOT published on
+   *  debits: those are one per agent hop, and the client already walks its
+   *  own balance down as metered usage streams in. */
+  CREDITS_CHANGED: "credits_changed"
 };
 
 // ../../packages/shared/src/preview-prompts.ts
@@ -3250,11 +3402,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path96) {
+function rmIfExistsQuiet(path97) {
   try {
-    fs2.rmSync(path96, { force: true });
+    fs2.rmSync(path97, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path96}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path97}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3461,8 +3613,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path96) {
-  return path96.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path97) {
+  return path97.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/error-tracking/index.mjs
@@ -6195,13 +6347,13 @@ var PostHogCoreStateless = class {
       sentFromRoute += batchMessages.length;
     }
   }
-  async _sendOtlpBatch({ path: path96, payload }) {
+  async _sendOtlpBatch({ path: path97, payload }) {
     if (this.disabled) return {
       kind: "fatal",
       error: new Error("The client is disabled")
     };
     const serialized = JSON.stringify(payload);
-    const url2 = `${this.host}/i/v1/${path96}?token=${encodeURIComponent(this.apiKey)}`;
+    const url2 = `${this.host}/i/v1/${path97}?token=${encodeURIComponent(this.apiKey)}`;
     const gzippedPayload = this.disableCompression ? null : await this.compressPayload(serialized);
     const fetchOptions = {
       method: "POST",
@@ -7441,14 +7593,14 @@ async function addSourceContext(frames, openSourceFile = import_promises.open, l
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-async function openRegularSourceFile(path96, openSourceFile, logger) {
+async function openRegularSourceFile(path97, openSourceFile, logger) {
   let fileHandle;
   let isValid = false;
   try {
-    fileHandle = await openSourceFile(path96, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
+    fileHandle = await openSourceFile(path97, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
     const fileStat = await fileHandle.stat();
     if (!fileStat.isFile()) return;
-    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path96}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
+    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path97}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
     isValid = true;
     return fileHandle;
   } catch {
@@ -7458,8 +7610,8 @@ async function openRegularSourceFile(path96, openSourceFile, logger) {
     });
   }
 }
-async function getContextLinesFromFile(path96, ranges, output, cacheKey, openSourceFile, logger) {
-  const fileHandle = await openRegularSourceFile(path96, openSourceFile, logger);
+async function getContextLinesFromFile(path97, ranges, output, cacheKey, openSourceFile, logger) {
+  const fileHandle = await openRegularSourceFile(path97, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
   return new Promise((resolve11) => {
@@ -7561,22 +7713,22 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path96) {
-  return path96.startsWith("node:") || path96.endsWith(".min.js") || path96.endsWith(".min.cjs") || path96.endsWith(".min.mjs") || path96.startsWith("data:");
+function shouldSkipContextLinesForFile(path97) {
+  return path97.startsWith("node:") || path97.endsWith(".min.js") || path97.endsWith(".min.cjs") || path97.endsWith(".min.mjs") || path97.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
   if (void 0 !== frame.colno && frame.colno > MAX_CONTEXTLINES_COLNO) return true;
   return false;
 }
-function makeSourceCacheKey(path96, basePath) {
-  if ((0, import_node_path.isAbsolute)(path96)) return JSON.stringify([
+function makeSourceCacheKey(path97, basePath) {
+  if ((0, import_node_path.isAbsolute)(path97)) return JSON.stringify([
     null,
-    path96
+    path97
   ]);
   return void 0 === basePath ? void 0 : JSON.stringify([
     basePath,
-    path96
+    path97
   ]);
 }
 function rangeExistsInContentCache(cacheKey, range) {
@@ -10237,7 +10389,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.1" : "0.0.0-dev",
+    cliVersion: true ? "2.75.3" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10479,7 +10631,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.1",
+  version: "2.75.3",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12170,7 +12322,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.1" ? { ideVersion: "2.75.1" } : {}
+      ..."2.75.3" ? { ideVersion: "2.75.3" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -19806,8 +19958,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path96 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path96) return null;
+  const path97 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path97) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -19824,7 +19976,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path96.trim(),
+    path: path97.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -19907,10 +20059,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path96, lineNo, sevToken, message] = m;
-    if (!path96 || !lineNo || !message) continue;
+    const [, path97, lineNo, sevToken, message] = m;
+    if (!path97 || !lineNo || !message) continue;
     hunks.push({
-      path: path96.trim(),
+      path: path97.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -20628,14 +20780,14 @@ function defaultSdkDir() {
   return resolveSdkDirViaRequire();
 }
 function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
   const platformKey = deps.platformKey ?? currentPlatformKey();
   const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
   if (!sdkDir) return null;
   const scopeDir = import_path4.default.dirname(sdkDir);
   const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
   const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync29(candidate) ? candidate : null;
+  return existsSync30(candidate) ? candidate : null;
 }
 var realSleep = (ms) => new Promise((resolve11) => setTimeout(resolve11, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
@@ -20717,18 +20869,18 @@ function augmentUserLocalBinPaths(deps = {}) {
   env.PATH = [...additions, ...parts].join(p2.delimiter);
 }
 function resolveCursorAgentBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
   const platform3 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   if (platform3 === "win32") {
     const localAppData = env.LOCALAPPDATA;
     if (!localAppData) return null;
     const exe = import_path4.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync29(exe) ? exe : null;
+    return existsSync30(exe) ? exe : null;
   }
   const home = deps.homedir ?? import_os4.default.homedir();
   const unix = import_path4.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync29(unix) ? unix : null;
+  return existsSync30(unix) ? unix : null;
 }
 async function waitForCursorAgent(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
@@ -24331,6 +24483,9 @@ function clearHouseProxyEnvOverrides() {
 function isHouseProxyEnv(env) {
   return typeof env.ANTHROPIC_AUTH_TOKEN === "string" && env.ANTHROPIC_AUTH_TOKEN.length > 0 && (env.ANTHROPIC_BASE_URL ?? "").includes("/api/v1/agent-proxy");
 }
+function currentRailWireId(env = process.env) {
+  return isHouseProxyEnv(env) ? houseRailWireId(env) : null;
+}
 function pickHouseProxyEnv(env) {
   const out2 = {};
   for (const key of HOUSE_PROXY_ENV_KEYS) {
@@ -24501,7 +24656,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.1" : null;
+  const current2 = true ? "2.75.3" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24518,7 +24673,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.1" : null;
+  const current2 = true ? "2.75.3" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24541,7 +24696,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.1" : null;
+  return true ? "2.75.3" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -26518,7 +26673,7 @@ async function defaultFetchJson(url2) {
 async function readUsageReport(deps = {}) {
   const port = deps.port ?? HEADROOM_PROXY_PORT;
   const base = `http://127.0.0.1:${port}`;
-  const get4 = deps.fetchJson ?? ((path96) => defaultFetchJson(`${base}${path96}`));
+  const get4 = deps.fetchJson ?? ((path97) => defaultFetchJson(`${base}${path97}`));
   let history;
   try {
     history = await get4("/stats-history");
@@ -32292,11 +32447,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path96 = fileFlag.slice("--token-file=".length);
+    const path97 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs66.readFileSync(path96, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path96} is empty`);
-      rmIfExistsQuiet(path96);
+      const content = fs66.readFileSync(path97, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path97} is empty`);
+      rmIfExistsQuiet(path97);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -39229,12 +39384,12 @@ function buildRelaunchProxyEnv(baseEnv) {
   return env;
 }
 var relaunchProxyWithoutBudget = async () => {
-  const { spawn: spawn48 } = await import("child_process");
+  const { spawn: spawn49 } = await import("child_process");
   killHeadroomProxy();
   await new Promise((r) => setTimeout(r, 500));
   const proxyEnv = buildRelaunchProxyEnv(process.env);
   try {
-    const proxy = spawn48(
+    const proxy = spawn49(
       "headroom",
       ["proxy", "--port", "8787"],
       { stdio: "ignore", detached: true, env: proxyEnv }
@@ -40766,7 +40921,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs83 = await import("fs/promises");
+  const fs84 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -40774,7 +40929,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs83.readdir(dir, { withFileTypes: true });
+      const dirents = await fs84.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -41303,12 +41458,19 @@ var PROVIDER_OUTAGE_RE = /overloaded_error|\boverloaded\b|service[ _]unavailable
 function looksLikeProviderOutage(text) {
   return PROVIDER_OUTAGE_RE.test(text);
 }
-function agentStatusPage(agent) {
+function agentStatusPage(agent, railWireId) {
+  if (railWireId) return null;
   const a = (agent ?? "").toLowerCase();
   const id = a.includes("claude") || a.includes("anthropic") ? "claude" : a.includes("codex") || a.includes("openai") ? "codex" : a.includes("gemini") || a.includes("google") ? "gemini" : a.includes("copilot") ? "copilot" : a.includes("cursor") ? "cursor" : null;
   return id ? agentHooks(id)?.statusPage ?? null : null;
 }
-function providerOutageMessage(agent) {
+function providerOutageMessage(agent, railWireId) {
+  if (railWireId) {
+    const who2 = isManagedProviderId(railWireId) ? MANAGED_PROVIDER_DISPLAY_NAMES[railWireId] : HOUSE_AGENT_NAME;
+    return `\u{1F310} **CodeAgent's agent service is having a disruption \u2014 this isn't your session.**
+
+Your ${who2} agent couldn't finish this turn because our provider returned an overload error. It usually clears up on its own \u2014 just send your message again in a bit.`;
+  }
   const info = agentStatusPage(agent);
   const who = info ? info.vendor : "The agent provider";
   return `\u{1F310} **${who} is having a service disruption \u2014 this isn\u2019t your session.**
@@ -41317,7 +41479,7 @@ The agent provider returned an overload/outage error, so this turn couldn\u2019t
 
 Follow the status here: [${info.url}](${info.url})` : "");
 }
-function startupFailureMessage(agent, detail, recentStderr) {
+function startupFailureMessage(agent, detail, recentStderr, railWireId) {
   const haystack2 = `${detail}
 ${recentStderr}`;
   if (agentHooks(agent)?.classifyStartupFailure?.(haystack2) === "ineligible_tier") {
@@ -41332,7 +41494,7 @@ ${recentStderr}`;
     ].join("\n");
   }
   if (looksLikeAuthFailure(haystack2)) return AUTH_FAILURE_MESSAGE;
-  if (looksLikeProviderOutage(haystack2)) return providerOutageMessage(agent);
+  if (looksLikeProviderOutage(haystack2)) return providerOutageMessage(agent, railWireId);
   const tail = recentStderr.split("\n").filter(Boolean).slice(-3).join("\n");
   return [`\u26A0\uFE0F The ${agent} agent failed to start.`, "", tail ? `Details:
 ${tail}` : detail].join(
@@ -41366,7 +41528,7 @@ ${opts.recentStderr}`;
     return budgetBubbleMessage(opts.agent, extractBudgetPeriod(budgetHaystack));
   }
   if (looksLikeProviderOutage(opts.detail) || looksLikeProviderOutage(opts.recentStderr)) {
-    return providerOutageMessage(opts.agent);
+    return providerOutageMessage(opts.agent, opts.railWireId);
   }
   if (!opts.hadText) return TURN_FAILURE_MESSAGE;
   return null;
@@ -41376,7 +41538,7 @@ function adapterExitMessage(opts) {
   if (opts.code === WINDOWS_CONTROL_C_EXIT) return null;
   if (opts.signal === "SIGINT") return null;
   if (opts.authFail) return AUTH_FAILURE_MESSAGE;
-  if (opts.outageFail) return providerOutageMessage(opts.agent);
+  if (opts.outageFail) return providerOutageMessage(opts.agent, opts.railWireId);
   return `Agent adapter exited unexpectedly (code=${opts.code ?? "null"} signal=${opts.signal ?? "null"}).`;
 }
 
@@ -43074,7 +43236,11 @@ ${recentStderr.join("\n")}`);
         detail,
         recentStderr: recentStderr.join("\n"),
         hadText,
-        agent: opts.agent
+        agent: opts.agent,
+        // On the managed/house rail the runtime is Claude Code for EVERY
+        // provider, so without this the bubble names Anthropic for OUR
+        // proxy's outage. See `agentStatusPage`.
+        railWireId: currentRailWireId()
       });
       const failed = { error: detail };
       if (bubble) {
@@ -44211,7 +44377,12 @@ var AcpHistory = class {
 };
 var _startupCredentialReportGuard = { reported: false };
 async function surfaceStartupFailure(opts) {
-  const msg = startupFailureMessage(opts.agent, opts.detail, opts.recentStderr);
+  const msg = startupFailureMessage(
+    opts.agent,
+    opts.detail,
+    opts.recentStderr,
+    currentRailWireId()
+  );
   const reason = startupCredentialInvalidReason(opts.agent, opts.detail, opts.recentStderr);
   if (reason !== null && !_startupCredentialReportGuard.reported && opts.sessionId && opts.pluginAuthToken) {
     _startupCredentialReportGuard.reported = true;
@@ -44348,7 +44519,14 @@ async function runAcpSession(opts) {
       log.warn("acpRunner", `adapter died code=${code} signal=${signal}; shutting down session`);
       const authFail = looksLikeAuthFailure(recentStderr.join("\n"));
       const outageFail = !authFail && looksLikeProviderOutage(recentStderr.join("\n"));
-      const message = adapterExitMessage({ code, signal, authFail, outageFail, agent: opts.agent });
+      const message = adapterExitMessage({
+        code,
+        signal,
+        authFail,
+        outageFail,
+        agent: opts.agent,
+        railWireId: currentRailWireId()
+      });
       const benign = message === null;
       if (authFail) {
         void reportCredentialInvalid(opts);
@@ -49957,7 +50135,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.1" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.3" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50154,7 +50332,7 @@ async function completion(args2) {
 }
 
 // src/integrations/mcp-run.ts
-var import_node_child_process34 = require("child_process");
+var import_node_child_process35 = require("child_process");
 
 // src/integrations/launcher-env.ts
 var LAUNCHER_ENV = Object.freeze({
@@ -50238,7 +50416,7 @@ function resolveDelivery(id) {
 function commandExists(command2) {
   try {
     const probe = process.platform === "win32" ? "where" : "which";
-    (0, import_node_child_process34.execFileSync)(probe, [command2], { stdio: "ignore" });
+    (0, import_node_child_process35.execFileSync)(probe, [command2], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -50271,7 +50449,7 @@ function ensureCommand(command2) {
   }
   if (command2 === "uvx") {
     try {
-      (0, import_node_child_process34.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
+      (0, import_node_child_process35.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4,
         env: { ...process.env, UV_NO_MODIFY_PATH: "1" }
@@ -50280,7 +50458,7 @@ function ensureCommand(command2) {
     }
     if (resolveLauncherPath(command2) !== command2) return;
     try {
-      (0, import_node_child_process34.execSync)("python3 -m pip install --user --quiet uv", {
+      (0, import_node_child_process35.execSync)("python3 -m pip install --user --quiet uv", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4
       });
@@ -50358,7 +50536,7 @@ async function mcpRun(args2) {
 }
 
 // src/integrations/mcp-warm.ts
-var import_node_child_process35 = require("child_process");
+var import_node_child_process36 = require("child_process");
 function specOf(delivery) {
   if (!delivery.command) return null;
   const spec = (delivery.args ?? []).find((a) => !a.startsWith("-"));
@@ -50402,7 +50580,7 @@ var WARM_TOTAL_BUDGET_MS = 10 * 6e4;
 var WARM_CONCURRENCY = 4;
 function runCapturing(command2, args2, timeoutMs) {
   return new Promise((resolve11) => {
-    const child = (0, import_node_child_process35.spawn)(command2, args2, {
+    const child = (0, import_node_child_process36.spawn)(command2, args2, {
       env: { ...process.env, ...LAUNCHER_ENV },
       stdio: ["ignore", "ignore", "pipe"],
       // `npx`/`uv` are `.cmd` shims on Windows; Node ≥ 20.12 refuses to spawn a
@@ -50481,7 +50659,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.1" : "unknown";
+  const v = true ? "2.75.3" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.1",
+  "version": "2.75.3",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",