codeam-cli 2.16.1 → 2.16.2

package/dist/index.js

@@ -424,7 +424,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.16.1",
+  version: "2.16.2",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6262,6 +6262,7 @@ var HistoryService = class _HistoryService {
 
 // src/services/file-watcher.service.ts
 var import_child_process7 = require("child_process");
+var os13 = __toESM(require("os"));
 var path15 = __toESM(require("path"));
 
 // src/services/file-watcher/diff-parser.ts
@@ -6397,6 +6398,44 @@ var API_BASE5 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
 var DEBOUNCE_MS = 250;
 var MAX_RETRIES = 2;
 var RETRY_BACKOFF_MS = 300;
+var WINDOWS_LEGACY_JUNCTIONS = [
+  /[\\/]Application Data([\\/]|$)/i,
+  /[\\/]Cookies([\\/]|$)/i,
+  /[\\/]Local Settings([\\/]|$)/i,
+  /[\\/]My Documents([\\/]|$)/i,
+  /[\\/]NetHood([\\/]|$)/i,
+  /[\\/]PrintHood([\\/]|$)/i,
+  /[\\/]Recent([\\/]|$)/i,
+  /[\\/]SendTo([\\/]|$)/i,
+  /[\\/]Start Menu([\\/]|$)/i,
+  /[\\/]Templates([\\/]|$)/i
+];
+function isUnsafeWindowsWatchRoot(dir, homedir12) {
+  const norm = (p2) => p2.replace(/\//g, "\\").replace(/\\+$/, "").toLowerCase();
+  const cwd = norm(dir);
+  const home = norm(homedir12);
+  if (cwd === home) return true;
+  if (/^[a-z]:$/.test(cwd)) return true;
+  const sysRoots = [
+    "c:\\windows",
+    "c:\\program files",
+    "c:\\program files (x86)",
+    "c:\\programdata"
+  ];
+  for (const root of sysRoots) {
+    if (cwd === root || cwd.startsWith(root + "\\")) return true;
+  }
+  return false;
+}
+var _chokidarSeam = {
+  load: () => {
+    try {
+      return require("chokidar");
+    } catch {
+      return null;
+    }
+  }
+};
 var FileWatcherService = class {
   constructor(opts) {
     this.opts = opts;
@@ -6419,14 +6458,19 @@ var FileWatcherService = class {
     if (this.stopped) {
       throw new Error("FileWatcherService has already been stopped \u2014 re-instantiate to restart.");
     }
-    let chokidar2;
-    try {
-      chokidar2 = require("chokidar");
-    } catch (err) {
+    const isWin = process.platform === "win32";
+    if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os13.homedir())) {
+      log.warn(
+        "fileWatcher",
+        `refusing to watch ${this.opts.workingDir} \u2014 looks like a Windows user-profile or system path. Run codeam from your project folder to enable file change emission.`
+      );
+      return;
+    }
+    const chokidar2 = _chokidarSeam.load();
+    if (!chokidar2) {
       log.warn(
         "fileWatcher",
-        `chokidar unavailable \u2014 file change emission disabled`,
-        err
+        `chokidar unavailable \u2014 file change emission disabled`
       );
       return;
     }
@@ -6444,11 +6488,22 @@ var FileWatcherService = class {
         /\.parcel-cache/,
         // Build outputs that aren't a typical "dist" target
         /target\//,
-        /__pycache__/
+        /__pycache__/,
+        // Windows-only: skip legacy user-profile junctions whose ACLs
+        // throw EPERM during chokidar's recursive traversal.
+        ...isWin ? WINDOWS_LEGACY_JUNCTIONS : []
       ],
       ignoreInitial: true,
       // we only care about post-start changes
       persistent: true,
+      // Windows-only safety net: don't follow reparse points, and let
+      // chokidar swallow EPERM/EACCES on unreadable paths instead of
+      // bubbling them up as fatal errors. Both are no-ops on macOS
+      // (fsevents traversal doesn't fail on permission errors).
+      ...isWin ? {
+        followSymlinks: false,
+        ignorePermissionErrors: true
+      } : {},
       awaitWriteFinish: {
         // Coalesces rapid sequential writes (npm install spam, build
         // tools emitting bursts). Lower than chokidar's default so
@@ -6461,6 +6516,13 @@ var FileWatcherService = class {
     watcher.on("add", (filePath) => this.schedule(filePath, "add"));
     watcher.on("change", (filePath) => this.schedule(filePath, "change"));
     watcher.on("unlink", (filePath) => this.schedule(filePath, "unlink"));
+    watcher.on("error", (err) => {
+      const code = err?.code ?? "unknown";
+      log.warn(
+        "fileWatcher",
+        `chokidar error (code=${code}) \u2014 watcher continues: ${err}`
+      );
+    });
     this.watcher = watcher;
     log.info(
       "fileWatcher",
@@ -7199,7 +7261,7 @@ function buildKeepAlive(ctx) {
 
 // src/commands/start/handlers.ts
 var fs14 = __toESM(require("fs"));
-var os13 = __toESM(require("os"));
+var os14 = __toESM(require("os"));
 var path19 = __toESM(require("path"));
 var import_crypto3 = require("crypto");
 var import_child_process11 = require("child_process");
@@ -8007,7 +8069,7 @@ function closeTerminal(sessionId) {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path19.join(os13.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
+    const tmpPath = path19.join(os14.tmpdir(), `codeam-${(0, import_crypto3.randomUUID)()}-${safeName}`);
     fs14.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     return tmpPath;
   });
@@ -8596,7 +8658,7 @@ async function pair(args2 = []) {
 
 // src/commands/pair-auto.ts
 var fs15 = __toESM(require("fs"));
-var os14 = __toESM(require("os"));
+var os15 = __toESM(require("os"));
 var import_crypto5 = require("crypto");
 var API_BASE7 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
 function fail(msg) {
@@ -8636,7 +8698,7 @@ async function claim(token, pluginId) {
     pluginId,
     ideName: "codeam-cli (codespace)",
     ideVersion: process.env.npm_package_version ?? "unknown",
-    hostname: os14.hostname(),
+    hostname: os15.hostname(),
     codespaceName: process.env.CODESPACE_NAME ?? "",
     // Current git branch of the codespace's working directory, so the
     // backend can populate `PairedSession.branch` for the codespace pair.
@@ -10741,7 +10803,7 @@ var import_picocolors11 = __toESM(require("picocolors"));
 // src/agents/claude/local-token.ts
 var import_node_child_process2 = require("child_process");
 var fs16 = __toESM(require("fs"));
-var os15 = __toESM(require("os"));
+var os16 = __toESM(require("os"));
 var path24 = __toESM(require("path"));
 var import_node_util3 = require("util");
 var execFileP7 = (0, import_node_util3.promisify)(import_node_child_process2.execFile);
@@ -10752,7 +10814,7 @@ var KEYCHAIN_SERVICE_NAMES = [
   "Anthropic Claude"
 ];
 function claudeCredentialsPaths() {
-  const home = os15.homedir();
+  const home = os16.homedir();
   return [
     path24.join(home, ".claude", ".credentials.json"),
     path24.join(home, ".config", "claude", ".credentials.json")
@@ -10787,10 +10849,10 @@ async function extractLocalClaudeToken() {
 
 // src/agents/codex/local-token.ts
 var fs17 = __toESM(require("fs"));
-var os16 = __toESM(require("os"));
+var os17 = __toESM(require("os"));
 var path25 = __toESM(require("path"));
 function codexCredentialsPath() {
-  return path25.join(os16.homedir(), ".codex", "auth.json");
+  return path25.join(os17.homedir(), ".codex", "auth.json");
 }
 async function extractLocalCodexToken() {
   const file = codexCredentialsPath();
@@ -10981,10 +11043,20 @@ async function link(args2 = []) {
   await uploadAndSucceed(meta, paired, pluginId, captured);
 }
 async function captureFreshCredentials(meta) {
+  const isWin = process.platform === "win32";
   const watcher = import_chokidar.default.watch(meta.watchPaths(), {
     persistent: true,
     ignoreInitial: false,
-    awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 }
+    awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 },
+    // Windows-only: when a credential file's ancestor is missing,
+    // chokidar walks up to the closest existing parent and starts
+    // traversing it. On a default Windows shell that ancestor is
+    // `C:\Users\<u>`, which contains legacy junctions whose ACL makes
+    // `fs.watch` throw EPERM (#43). These flags are no-ops on macOS,
+    // where the user has read access to their entire home.
+    ...isWin ? { followSymlinks: false, ignorePermissionErrors: true } : {}
+  });
+  watcher.on("error", () => {
   });
   let child = null;
   let keychainPoll = null;
@@ -11085,7 +11157,7 @@ async function uploadAndSucceed(meta, paired, pluginId, token) {
 // src/commands/version.ts
 var import_picocolors12 = __toESM(require("picocolors"));
 function version() {
-  const v = true ? "2.16.1" : "unknown";
+  const v = true ? "2.16.2" : "unknown";
   console.log(`${import_picocolors12.default.bold("codeam-cli")} ${import_picocolors12.default.cyan(v)}`);
 }
 
@@ -11128,7 +11200,7 @@ function help() {
 
 // src/lib/updateNotifier.ts
 var fs19 = __toESM(require("fs"));
-var os17 = __toESM(require("os"));
+var os18 = __toESM(require("os"));
 var path27 = __toESM(require("path"));
 var https7 = __toESM(require("https"));
 var import_picocolors14 = __toESM(require("picocolors"));
@@ -11137,7 +11209,7 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path27.join(os17.homedir(), ".codeam");
+  const dir = path27.join(os18.homedir(), ".codeam");
   return path27.join(dir, "update-check.json");
 }
 function readCache() {
@@ -11225,7 +11297,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.16.1" : null;
+  const current = true ? "2.16.2" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.16.1",
+  "version": "2.16.2",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",