codeam-cli 2.75.18 → 2.75.20

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.19] — 2026-09-25
+
+### Fixed
+
+- **cli:** Authenticate gh on self-hosted boxes with a token lacking read:org
+
+## [2.75.18] — 2026-09-25
+
+### Fixed
+
+- **cli:** Skip bd bootstrap on an empty remote; agent must not repair beads
+- **cli:** Beads mint must not write agent files or git hooks into the repo
+
 ## [2.75.17] — 2026-09-25
 
 ### Fixed

package/dist/index.js

@@ -10509,7 +10509,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.18" : "0.0.0-dev",
+    cliVersion: true ? "2.75.20" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10751,7 +10751,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.18",
+  version: "2.75.20",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12081,7 +12081,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.18" ? { ideVersion: "2.75.18" } : {}
+      ..."2.75.20" ? { ideVersion: "2.75.20" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -22784,6 +22784,14 @@ module.exports = { server: { allowedHosts: ${list} } };
 function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
+var SHIM_HEADER = "// codeam preview host-allow shim";
+async function isOurShim(abs) {
+  try {
+    return (await import_fs2.promises.readFile(abs, "utf8")).startsWith(SHIM_HEADER);
+  } catch {
+    return false;
+  }
+}
 async function writeMarker(cwd, marker) {
   await import_fs2.promises.mkdir(path41.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs2.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
@@ -22837,6 +22845,16 @@ async function applyPreviewHostAllow(cwd) {
     if (existing) {
       const ext = path41.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
+      if (await isOurShim(path41.join(cwd, existing))) {
+        const origAbs = path41.join(cwd, origBasename);
+        if (!await fileExists(origAbs) || await isOurShim(origAbs)) {
+          log.warn("preview", `host-allow: ${existing} is a leftover shim with no original \u2014 skipped`);
+          return;
+        }
+        await import_fs2.promises.rm(path41.join(cwd, existing), { force: true });
+        await import_fs2.promises.rename(origAbs, path41.join(cwd, existing));
+        log.info("preview", `host-allow: restored ${existing} from a leftover ${origBasename}`);
+      }
       const esm = await isEsmConfig(cwd, existing);
       await import_fs2.promises.rename(path41.join(cwd, existing), path41.join(cwd, origBasename));
       await import_fs2.promises.writeFile(path41.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
@@ -47347,13 +47365,45 @@ async function ensureGhAuth(runner, ghCmd, token) {
     });
     if (login.code === 0) {
       log.info("host-agent", "gh authenticated with the linked GitHub token");
+    } else if (/missing required scope/i.test(login.stderr) && writeGhHostsToken(token)) {
+      log.info("host-agent", "gh authenticated via hosts.yml (token lacks read:org)");
     } else {
-      log.warn("host-agent", `gh auth login failed (code=${String(login.code)}) \u2014 gh unauthenticated`);
+      log.warn(
+        "host-agent",
+        `gh auth login failed (code=${String(login.code)}): ${login.stderr.trim().slice(0, 200)} \u2014 gh unauthenticated`
+      );
     }
   } catch (e) {
     log.warn("host-agent", `gh auth errored: ${e instanceof Error ? e.message : String(e)}`);
   }
 }
+function ghConfigDir() {
+  if (process.env.GH_CONFIG_DIR) return process.env.GH_CONFIG_DIR;
+  if (process.env.XDG_CONFIG_HOME) return path88.join(process.env.XDG_CONFIG_HOME, "gh");
+  if (process.platform === "win32" && process.env.APPDATA) {
+    return path88.join(process.env.APPDATA, "GitHub CLI");
+  }
+  return path88.join(os60.homedir(), ".config", "gh");
+}
+function writeGhHostsToken(token) {
+  try {
+    const dir = ghConfigDir();
+    const file = path88.join(dir, "hosts.yml");
+    if (fs75.existsSync(file)) return false;
+    fs75.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs75.writeFileSync(
+      file,
+      `github.com:
+    oauth_token: ${token}
+    git_protocol: https
+`,
+      { mode: 384, flag: "wx" }
+    );
+    return true;
+  } catch {
+    return false;
+  }
+}
 var FALLBACK_GLAB_VERSION = "1.54.0";
 var GLAB_RELEASE_API = "https://gitlab.com/api/v4/projects/gitlab-org%2Fcli/releases/permalink/latest";
 async function resolveLatestGlabVersion() {
@@ -47648,7 +47698,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.18" : null;
+  const current2 = true ? "2.75.20" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47665,7 +47715,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.18" : null;
+  const current2 = true ? "2.75.20" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47688,7 +47738,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.18" : null;
+  return true ? "2.75.20" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -49574,7 +49624,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.18" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.20" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50098,7 +50148,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.18" : "unknown";
+  const v = true ? "2.75.20" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.18",
+  "version": "2.75.20",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",