codeam-cli 2.75.2 → 2.75.4

package/CHANGELOG.md

@@ -4,6 +4,36 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.3] — 2026-09-16
+
+### Added
+
+- **cli:** The agent can deploy, without ever seeing the deploy key (#758)
+
+### Fixed
+
+- **shared:** Gemini solo acepta API key — Google retiró el nivel OAuth (#761)
+
+## [2.75.2] — 2026-09-15
+
+### Added
+
+- **shared:** Declare the credits_changed user event
+
+### CI
+
+- **release:** Wait up to 7.5 min for npm to serve the published version (#754)
+
+### Fixed
+
+- **cli:** A managed-rail outage must never be blamed on Anthropic (#757)
+
+## [2.75.1] — 2026-09-12
+
+### Fixed
+
+- **cli:** Managed sessions announce the managed agent, not the Claude Code runtime (#753)
+
 ## [2.75.0] — 2026-09-12
 
 ### Added

package/dist/index.js

@@ -271,8 +271,8 @@ var init_stdio_proxy = __esm({
       }
       async spawnChild(stdout, preResolved) {
         const spec = preResolved ?? await this.opts.spawnSpec();
-        const spawn48 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
-        const child = spawn48(spec.command, spec.args, {
+        const spawn49 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
+        const child = spawn49(spec.command, spec.args, {
           env: { ...process.env, ...spec.env },
           // env only — never argv
           stdio: ["pipe", "pipe", "inherit"]
@@ -300,7 +300,9 @@ var convex_admin_mcp_exports = {};
 __export(convex_admin_mcp_exports, {
   callConvexTool: () => callConvexTool,
   deploymentNameFromKey: () => deploymentNameFromKey,
-  runConvexAdminMcp: () => runConvexAdminMcp
+  resolveConvexBin: () => resolveConvexBin,
+  runConvexAdminMcp: () => runConvexAdminMcp,
+  runConvexDeploy: () => runConvexDeploy
 });
 function deploymentNameFromKey(key) {
   const prefix = key.split("|")[0];
@@ -310,6 +312,81 @@ function deploymentNameFromKey(key) {
   }
   return null;
 }
+function defaultSpawn(timeoutMs) {
+  return (cmd, args2, opts) => new Promise((resolve11) => {
+    let out2 = "";
+    let err = "";
+    let done = false;
+    const finish = (code) => {
+      if (done) return;
+      done = true;
+      resolve11({ code, stdout: out2, stderr: err });
+    };
+    let child;
+    try {
+      child = (0, import_node_child_process34.spawn)(cmd, args2, { cwd: opts.cwd, env: opts.env, stdio: ["ignore", "pipe", "pipe"] });
+    } catch (e) {
+      finish(1);
+      err = e instanceof Error ? e.message : String(e);
+      return;
+    }
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      err += `
+[codeam] convex deploy timed out after ${Math.round(timeoutMs / 1e3)}s`;
+      finish(124);
+    }, timeoutMs);
+    child.stdout?.on("data", (c2) => {
+      out2 += c2.toString();
+    });
+    child.stderr?.on("data", (c2) => {
+      err += c2.toString();
+    });
+    child.on("error", (e) => {
+      clearTimeout(timer);
+      err += (err ? "\n" : "") + e.message;
+      finish(1);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      finish(code ?? 1);
+    });
+  });
+}
+function resolveConvexBin(cwd) {
+  const local = path95.join(cwd, "node_modules", ".bin", process.platform === "win32" ? "convex.cmd" : "convex");
+  if (fs83.existsSync(local)) return { cmd: local, args: [] };
+  return { cmd: "npx", args: ["--yes", "convex"] };
+}
+function redact(text, key) {
+  if (!key) return text;
+  return text.split(key).join("***");
+}
+async function runConvexDeploy(key, args2, opts = {}) {
+  const cwd = args2.projectDir ?? opts.cwd ?? process.cwd();
+  const timeoutMs = opts.timeoutMs ?? 3e5;
+  const run = opts.spawnImpl ?? defaultSpawn(timeoutMs);
+  const bin = resolveConvexBin(cwd);
+  const argv = [...bin.args, "deploy"];
+  if (args2.previewName) argv.push("--preview-create", String(args2.previewName));
+  const { code, stdout, stderr } = await run(bin.cmd, argv, {
+    cwd,
+    // The ONLY place the secret travels.
+    env: { ...process.env, CONVEX_DEPLOY_KEY: key }
+  });
+  const body = redact([stdout, stderr].filter(Boolean).join("\n").trim(), key);
+  if (code === 0) {
+    return { ok: true, text: body || "Convex deploy completed." };
+  }
+  return {
+    ok: false,
+    text: `Convex deploy failed (exit ${code}).
+${body}`
+  };
+}
 async function adminQuery(baseUrl, key, api, body, fetchImpl = fetch) {
   const res = await fetchImpl(`${baseUrl}/api/${api}`, {
     method: "POST",
@@ -320,7 +397,24 @@ async function adminQuery(baseUrl, key, api, body, fetchImpl = fetch) {
   const ok = res.ok && !/"status"\s*:\s*"error"/.test(text);
   return { ok, text };
 }
-async function callConvexTool(baseUrl, key, tool, args2, fetchImpl = fetch) {
+async function callConvexTool(baseUrl, key, tool, args2, fetchImpl = fetch, deployOpts = {}) {
+  switch (tool) {
+    case "deploy":
+      return runConvexDeploy(
+        key,
+        {
+          projectDir: typeof args2.projectDir === "string" ? args2.projectDir : void 0,
+          previewName: typeof args2.previewName === "string" ? args2.previewName : void 0
+        },
+        deployOpts
+      );
+  }
+  if (!baseUrl) {
+    return {
+      ok: false,
+      text: `The connected Convex deploy key is a PROJECT key, which names no single deployment, so '${tool}' (and the other data tools) cannot reach one. Use the 'deploy' tool \u2014 it resolves the target from the key itself \u2014 or reconnect Convex with a dev/prod deploy key (Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys) to enable the data tools.`
+    };
+  }
   switch (tool) {
     case "tables":
       return adminQuery(baseUrl, key, "query", {
@@ -362,12 +456,11 @@ async function runConvexAdminMcp(client3, id) {
   const name = deploymentNameFromKey(key);
   if (!name) {
     process.stderr.write(
-      `[codeam mcp-run convex] could not derive a deployment from the deploy key (expected a dev/prod deploy key like dev:name|\u2026 \u2014 got prefix "${key.split(":")[0]}"). Generate a deploy key at Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys.
+      `[codeam mcp-run convex] the deploy key names no single deployment (prefix "${key.split(":")[0]}"): the data tools are unavailable, 'deploy' still works. For the data tools, reconnect with a dev/prod deploy key (Convex Dashboard \u2192 Project Settings \u2192 Deploy Keys).
 `
     );
-    process.exit(1);
   }
-  const baseUrl = `https://${name}.convex.cloud`;
+  const baseUrl = name ? `https://${name}.convex.cloud` : "";
   const { Server } = await import("@modelcontextprotocol/sdk/server/index.js");
   const { StdioServerTransport } = await import("@modelcontextprotocol/sdk/server/stdio.js");
   const { ListToolsRequestSchema, CallToolRequestSchema } = await import("@modelcontextprotocol/sdk/types.js");
@@ -396,10 +489,13 @@ async function runConvexAdminMcp(client3, id) {
   });
   await server.connect(new StdioServerTransport());
 }
-var TOOLS;
+var import_node_child_process34, fs83, path95, TOOLS;
 var init_convex_admin_mcp = __esm({
   "src/integrations/convex-admin-mcp.ts"() {
     "use strict";
+    import_node_child_process34 = require("child_process");
+    fs83 = __toESM(require("fs"));
+    path95 = __toESM(require("path"));
     TOOLS = [
       {
         name: "tables",
@@ -449,6 +545,24 @@ var init_convex_admin_mcp = __esm({
           required: ["functionPath"],
           additionalProperties: false
         }
+      },
+      {
+        name: "deploy",
+        description: 'Deploy this repo\'s `convex/` functions, schema and indexes to the Convex deployment this integration is connected to. Use this after editing anything under `convex/` \u2014 a function you just wrote does NOT exist for the running app until it is deployed ("Could not find public function for ..." means exactly this). Do NOT run `npx convex deploy` or `npx convex dev` in the shell: those need an interactive login, and this tool already holds the credential.',
+        inputSchema: {
+          type: "object",
+          properties: {
+            projectDir: {
+              type: "string",
+              description: "Repo root holding the `convex/` directory. Defaults to the session cwd."
+            },
+            previewName: {
+              type: "string",
+              description: "Only for a PREVIEW deploy key: name the preview deployment to create (e.g. a branch name)."
+            }
+          },
+          additionalProperties: false
+        }
       }
     ];
   }
@@ -889,12 +1003,34 @@ var AGENT_REGISTRY = {
     displayName: "Gemini CLI",
     binaryName: "gemini",
     enabled: true,
-    // OAuth via `gemini auth login` (captured by `codeam link gemini`
-    // from ~/.gemini/oauth_creds.json) AND GEMINI_API_KEY are both
-    // accepted by the backend's GeminiProvisioningStrategy and propagated
-    // into codespace deploys.
-    supportedAuthKinds: ["oauth_token", "api_key"],
-    preferredAuthKind: "oauth_token",
+    // ⚠️ API KEY ONLY since 2026-06-18, when Google stopped Gemini CLI (and the
+    // Gemini Code Assist IDE extensions) serving requests for AI Pro, AI Ultra
+    // and free users, in the move to Antigravity CLI. Its announcement is
+    // explicit about what survives: "Gemini CLI will remain accessible via paid
+    // Gemini and Gemini Enterprise Agent Platform API keys."
+    //
+    // So the agent stays — `@google/gemini-cli` is NOT deprecated, it still
+    // ships weekly — but the OAuth door has to go: it captures a
+    // `~/.gemini/oauth_creds.json` from a CONSUMER Google account, which is
+    // exactly the tier that no longer serves requests. We used to PREFER that
+    // path, so it was the one we recommended first; on 2026-09-15 prod held 63
+    // Gemini links, 46 of them OAuth, 19 created after 2026-09-01 and the
+    // newest that same day. Three months of sending people through a bricked
+    // door — each one landing on `isGeminiIneligibleTier` at first use.
+    //
+    // ⚠️ Antigravity CLI is NOT a drop-in replacement for us: no official ACP
+    // mode (google-antigravity/antigravity-cli#31 open, 192 comments, zero
+    // `acp` hits in the repo as of 2026-09-15), and every third-party ACP
+    // adapter warns that driving `agy` that way matches what Google's FAQ calls
+    // a ToS violation — risking the USER's Google account. Our whole Gemini
+    // path is ACP, so adopting it would mean shipping that risk. Revisit only
+    // when #31 ships an official mode.
+    //
+    // Existing OAuth rows are NOT migrated: `supportedAuthMethods` gates the
+    // LINK call only, so the 46 stay readable and simply keep failing at the
+    // provider, where the ineligible-tier message already explains why.
+    supportedAuthKinds: ["api_key"],
+    preferredAuthKind: "api_key",
     // Not listed by `headroom wrap --help` — runs native.
     headroomWrappable: false,
     // Native ACP server: `gemini --skip-trust --acp`.
@@ -2058,6 +2194,16 @@ var INTEGRATION_REGISTRY = {
     // tools ourselves via a BUILT-IN MCP (delivery.builtin) against that admin
     // API — see apps/cli/src/integrations/convex-admin-mcp.ts. The user still
     // pastes a deploy key (Dashboard → Project Settings → Deploy Keys).
+    //
+    // ⚠️ That built-in ALSO owns `deploy`, and it is the only way an agent can
+    // push `convex/` changes. Deploying is bundle + push, not a REST call, so
+    // that one tool drives Convex's own CLI with the deploy key injected into
+    // THAT CHILD's env — the agent's shell never sees the credential. Before
+    // it existed the agent had the credential's power through the MCP but no
+    // way to deploy, so it looped on `npx convex dev` (interactive login) and
+    // asked the user to paste the token into the chat; the user ended up
+    // re-entering the SAME key by hand in Environment Variables, after burning
+    // real credits (2026-09-15).
     enabled: true,
     auth: {
       kind: "api_key",
@@ -2658,6 +2804,26 @@ var AGENT_STANDARD_TEXT = `# Working standard
 
 You are an AI coding agent working on the user's project through CodeAgent Mobile. Follow this standard on every task.
 
+## How to answer \u2014 you are being read on a PHONE
+
+Your reply is read on a narrow screen, often one-handed, often while the user is doing something else. Length is a cost they pay. Write accordingly.
+
+- **Lead with the answer.** First line = the result, the decision, or what changed. No preamble, no restating the request, no "Great question!", no narrating what you are about to do.
+- **Default to a few sentences.** Most replies fit in 1-2 short paragraphs or 3-6 tight bullets. A long reply is a deliberate choice you make because the task genuinely needs it \u2014 not the default.
+- **Say it once.** No summary of the summary, no closing paragraph that repeats the opening, no "let me know if you need anything else".
+- **Cut every word that carries no information** \u2014 hedges, filler adverbs, throat-clearing, and praise for the question.
+- **Expand when asked.** "Explain in detail", "walk me through it", "why?" are requests for depth: give it fully. Brevity is the default, not a ceiling.
+
+**Formatting for a narrow screen:**
+- Short paragraphs (1-3 sentences). Bullets over prose for anything that is a list. Never a wall of text.
+- **No wide tables** \u2014 they force horizontal scrolling and become unreadable. Use bullets, or at most two columns.
+- Code blocks only when the user needs the exact characters (a command to run, the changed lines). Show the relevant lines, not the whole file. Keep lines short so they don't wrap badly.
+- File references as \`path/to/file.ts:42\`, not pasted paths inside long prose.
+- Bold sparingly, for the one thing that matters in a block. Headings only when the reply genuinely has multiple sections.
+- No ASCII art, no banners, no decorative separators, no emoji unless the user uses them first.
+
+**Compress evidence, don't drop it.** Report the outcome, not the transcript: "tests: 128/128 green", "build failed \u2014 \`TS2322\` in \`api/client.ts:80\`". Paste raw output only when the user needs to read it themselves, and only the relevant lines.
+
 ## How to work
 - **Understand before acting.** Restate the goal, read the relevant code, and be clear on what "done" looks like before changing anything.
 - **Plan first for anything non-trivial** (3+ steps or a design decision): outline the approach and the files you'll touch, and share it before implementing. Skip the ceremony for small, obvious fixes.
@@ -3256,11 +3422,11 @@ function quiet(fn) {
     log.debug(TAG, "ignored sync error", err);
   }
 }
-function rmIfExistsQuiet(path96) {
+function rmIfExistsQuiet(path97) {
   try {
-    fs2.rmSync(path96, { force: true });
+    fs2.rmSync(path97, { force: true });
   } catch (err) {
-    log.debug(TAG, `rmIfExists failed for ${path96}`, err);
+    log.debug(TAG, `rmIfExists failed for ${path97}`, err);
   }
 }
 function killQuiet(target, signal = "SIGTERM") {
@@ -3467,8 +3633,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path96) {
-  return path96.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path97) {
+  return path97.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/error-tracking/index.mjs
@@ -6201,13 +6367,13 @@ var PostHogCoreStateless = class {
       sentFromRoute += batchMessages.length;
     }
   }
-  async _sendOtlpBatch({ path: path96, payload }) {
+  async _sendOtlpBatch({ path: path97, payload }) {
     if (this.disabled) return {
       kind: "fatal",
       error: new Error("The client is disabled")
     };
     const serialized = JSON.stringify(payload);
-    const url2 = `${this.host}/i/v1/${path96}?token=${encodeURIComponent(this.apiKey)}`;
+    const url2 = `${this.host}/i/v1/${path97}?token=${encodeURIComponent(this.apiKey)}`;
     const gzippedPayload = this.disableCompression ? null : await this.compressPayload(serialized);
     const fetchOptions = {
       method: "POST",
@@ -7447,14 +7613,14 @@ async function addSourceContext(frames, openSourceFile = import_promises.open, l
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-async function openRegularSourceFile(path96, openSourceFile, logger) {
+async function openRegularSourceFile(path97, openSourceFile, logger) {
   let fileHandle;
   let isValid = false;
   try {
-    fileHandle = await openSourceFile(path96, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
+    fileHandle = await openSourceFile(path97, import_node_fs.constants.O_RDONLY | import_node_fs.constants.O_NONBLOCK);
     const fileStat = await fileHandle.stat();
     if (!fileStat.isFile()) return;
-    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path96}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
+    if (fileStat.size > MAX_CONTEXTLINES_FILE_SIZE) return void logger?.debug(`Skipping source context for oversized file ${path97}: ${fileStat.size} bytes exceeds ${MAX_CONTEXTLINES_FILE_SIZE}`);
     isValid = true;
     return fileHandle;
   } catch {
@@ -7464,8 +7630,8 @@ async function openRegularSourceFile(path96, openSourceFile, logger) {
     });
   }
 }
-async function getContextLinesFromFile(path96, ranges, output, cacheKey, openSourceFile, logger) {
-  const fileHandle = await openRegularSourceFile(path96, openSourceFile, logger);
+async function getContextLinesFromFile(path97, ranges, output, cacheKey, openSourceFile, logger) {
+  const fileHandle = await openRegularSourceFile(path97, openSourceFile, logger);
   if (void 0 === fileHandle) return void LRU_FILE_CONTENTS_FS_READ_FAILED.set(cacheKey, 1);
   const openedFileHandle = fileHandle;
   return new Promise((resolve11) => {
@@ -7567,22 +7733,22 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path96) {
-  return path96.startsWith("node:") || path96.endsWith(".min.js") || path96.endsWith(".min.cjs") || path96.endsWith(".min.mjs") || path96.startsWith("data:");
+function shouldSkipContextLinesForFile(path97) {
+  return path97.startsWith("node:") || path97.endsWith(".min.js") || path97.endsWith(".min.cjs") || path97.endsWith(".min.mjs") || path97.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
   if (void 0 !== frame.colno && frame.colno > MAX_CONTEXTLINES_COLNO) return true;
   return false;
 }
-function makeSourceCacheKey(path96, basePath) {
-  if ((0, import_node_path.isAbsolute)(path96)) return JSON.stringify([
+function makeSourceCacheKey(path97, basePath) {
+  if ((0, import_node_path.isAbsolute)(path97)) return JSON.stringify([
     null,
-    path96
+    path97
   ]);
   return void 0 === basePath ? void 0 : JSON.stringify([
     basePath,
-    path96
+    path97
   ]);
 }
 function rangeExistsInContentCache(cacheKey, range) {
@@ -10243,7 +10409,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.2" : "0.0.0-dev",
+    cliVersion: true ? "2.75.4" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10485,7 +10651,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.2",
+  version: "2.75.4",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12176,7 +12342,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.2" ? { ideVersion: "2.75.2" } : {}
+      ..."2.75.4" ? { ideVersion: "2.75.4" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -19812,8 +19978,8 @@ function pickLine(obj) {
 function toHunk(raw, groupSeverity) {
   if (!raw || typeof raw !== "object") return null;
   const o = raw;
-  const path96 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
-  if (!path96) return null;
+  const path97 = asString(pick(o, ["file_path", "filePath", "file", "path", "filename", "fileName"])) ?? asString(pick(o, ["location"])?.path);
+  if (!path97) return null;
   const message = asString(
     pick(o, [
       "comment",
@@ -19830,7 +19996,7 @@ function toHunk(raw, groupSeverity) {
   const severity = normSeverity(pick(o, ["severity", "level", "priority", "impact"])) ?? normSeverity(groupSeverity);
   const locObj = pick(o, ["location"]) ?? o;
   return {
-    path: path96.trim(),
+    path: path97.trim(),
     line: pickLine(o) ?? pickLine(locObj),
     severity,
     message: (title && message ? `${title}: ${message}` : title || message).trim() || "(no message)"
@@ -19913,10 +20079,10 @@ function parsePlain(stdout) {
   for (const line of stdout.split(/\r?\n/)) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path96, lineNo, sevToken, message] = m;
-    if (!path96 || !lineNo || !message) continue;
+    const [, path97, lineNo, sevToken, message] = m;
+    if (!path97 || !lineNo || !message) continue;
     hunks.push({
-      path: path96.trim(),
+      path: path97.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: message.trim().replace(/^[*-]\s+/, "")
@@ -20634,14 +20800,14 @@ function defaultSdkDir() {
   return resolveSdkDirViaRequire();
 }
 function resolveClaudeNativeBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
   const platformKey = deps.platformKey ?? currentPlatformKey();
   const sdkDir = deps.sdkDir !== void 0 ? deps.sdkDir : defaultSdkDir();
   if (!sdkDir) return null;
   const scopeDir = import_path4.default.dirname(sdkDir);
   const binName = platformKey.startsWith("win32-") ? "claude.exe" : "claude";
   const candidate = import_path4.default.join(scopeDir, `claude-agent-sdk-${platformKey}`, binName);
-  return existsSync29(candidate) ? candidate : null;
+  return existsSync30(candidate) ? candidate : null;
 }
 var realSleep = (ms) => new Promise((resolve11) => setTimeout(resolve11, ms));
 async function waitForClaudeNativeBinary(opts = {}) {
@@ -20723,18 +20889,18 @@ function augmentUserLocalBinPaths(deps = {}) {
   env.PATH = [...additions, ...parts].join(p2.delimiter);
 }
 function resolveCursorAgentBinary(deps = {}) {
-  const existsSync29 = deps.existsSync ?? import_fs.default.existsSync;
+  const existsSync30 = deps.existsSync ?? import_fs.default.existsSync;
   const platform3 = deps.platform ?? process.platform;
   const env = deps.env ?? process.env;
   if (platform3 === "win32") {
     const localAppData = env.LOCALAPPDATA;
     if (!localAppData) return null;
     const exe = import_path4.default.win32.join(localAppData, "cursor-agent", "cursor-agent.exe");
-    return existsSync29(exe) ? exe : null;
+    return existsSync30(exe) ? exe : null;
   }
   const home = deps.homedir ?? import_os4.default.homedir();
   const unix = import_path4.default.posix.join(home, ".local", "bin", "cursor-agent");
-  return existsSync29(unix) ? unix : null;
+  return existsSync30(unix) ? unix : null;
 }
 async function waitForCursorAgent(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 18e4;
@@ -24510,7 +24676,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.2" : null;
+  const current2 = true ? "2.75.4" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24527,7 +24693,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.2" : null;
+  const current2 = true ? "2.75.4" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24550,7 +24716,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.2" : null;
+  return true ? "2.75.4" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -26527,7 +26693,7 @@ async function defaultFetchJson(url2) {
 async function readUsageReport(deps = {}) {
   const port = deps.port ?? HEADROOM_PROXY_PORT;
   const base = `http://127.0.0.1:${port}`;
-  const get4 = deps.fetchJson ?? ((path96) => defaultFetchJson(`${base}${path96}`));
+  const get4 = deps.fetchJson ?? ((path97) => defaultFetchJson(`${base}${path97}`));
   let history;
   try {
     history = await get4("/stats-history");
@@ -32301,11 +32467,11 @@ function resolveTokenValue(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path96 = fileFlag.slice("--token-file=".length);
+    const path97 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs66.readFileSync(path96, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path96} is empty`);
-      rmIfExistsQuiet(path96);
+      const content = fs66.readFileSync(path97, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path97} is empty`);
+      rmIfExistsQuiet(path97);
       return content;
     } catch (err) {
       fail(`Could not read --token-file: ${err.message}`);
@@ -39238,12 +39404,12 @@ function buildRelaunchProxyEnv(baseEnv) {
   return env;
 }
 var relaunchProxyWithoutBudget = async () => {
-  const { spawn: spawn48 } = await import("child_process");
+  const { spawn: spawn49 } = await import("child_process");
   killHeadroomProxy();
   await new Promise((r) => setTimeout(r, 500));
   const proxyEnv = buildRelaunchProxyEnv(process.env);
   try {
-    const proxy = spawn48(
+    const proxy = spawn49(
       "headroom",
       ["proxy", "--port", "8787"],
       { stdio: "ignore", detached: true, env: proxyEnv }
@@ -40775,7 +40941,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs83 = await import("fs/promises");
+  const fs84 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -40783,7 +40949,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs83.readdir(dir, { withFileTypes: true });
+      const dirents = await fs84.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -49989,7 +50155,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.2" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.4" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50186,7 +50352,7 @@ async function completion(args2) {
 }
 
 // src/integrations/mcp-run.ts
-var import_node_child_process34 = require("child_process");
+var import_node_child_process35 = require("child_process");
 
 // src/integrations/launcher-env.ts
 var LAUNCHER_ENV = Object.freeze({
@@ -50270,7 +50436,7 @@ function resolveDelivery(id) {
 function commandExists(command2) {
   try {
     const probe = process.platform === "win32" ? "where" : "which";
-    (0, import_node_child_process34.execFileSync)(probe, [command2], { stdio: "ignore" });
+    (0, import_node_child_process35.execFileSync)(probe, [command2], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -50303,7 +50469,7 @@ function ensureCommand(command2) {
   }
   if (command2 === "uvx") {
     try {
-      (0, import_node_child_process34.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
+      (0, import_node_child_process35.execSync)("curl -LsSf https://astral.sh/uv/install.sh | sh", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4,
         env: { ...process.env, UV_NO_MODIFY_PATH: "1" }
@@ -50312,7 +50478,7 @@ function ensureCommand(command2) {
     }
     if (resolveLauncherPath(command2) !== command2) return;
     try {
-      (0, import_node_child_process34.execSync)("python3 -m pip install --user --quiet uv", {
+      (0, import_node_child_process35.execSync)("python3 -m pip install --user --quiet uv", {
         stdio: ["ignore", process.stderr, process.stderr],
         timeout: 18e4
       });
@@ -50390,7 +50556,7 @@ async function mcpRun(args2) {
 }
 
 // src/integrations/mcp-warm.ts
-var import_node_child_process35 = require("child_process");
+var import_node_child_process36 = require("child_process");
 function specOf(delivery) {
   if (!delivery.command) return null;
   const spec = (delivery.args ?? []).find((a) => !a.startsWith("-"));
@@ -50434,7 +50600,7 @@ var WARM_TOTAL_BUDGET_MS = 10 * 6e4;
 var WARM_CONCURRENCY = 4;
 function runCapturing(command2, args2, timeoutMs) {
   return new Promise((resolve11) => {
-    const child = (0, import_node_child_process35.spawn)(command2, args2, {
+    const child = (0, import_node_child_process36.spawn)(command2, args2, {
       env: { ...process.env, ...LAUNCHER_ENV },
       stdio: ["ignore", "ignore", "pipe"],
       // `npx`/`uv` are `.cmd` shims on Windows; Node ≥ 20.12 refuses to spawn a
@@ -50513,7 +50679,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.2" : "unknown";
+  const v = true ? "2.75.4" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.2",
+  "version": "2.75.4",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",