codeam-cli 2.26.12 → 2.26.14

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.26.13] — 2026-06-04
+
+### Added
+
+- **cli:** Pre-flight install for missing node_modules before preview (#250)
+
+## [2.26.12] — 2026-06-04
+
+### Fixed
+
+- **cli:** Gate preview_ready on DNS resolution via c-ares + 1.1.1.1 (#249)
+
 ## [2.26.11] — 2026-06-03
 
 ### Added

package/dist/index.js

@@ -344,7 +344,7 @@ Return ONLY a JSON object on stdout (no prose, no markdown fences):
   "port": <number>,
   "ready_pattern": "<regex matching the server-ready stdout line>",
   "env": { "HOST": "0.0.0.0" },
-  "setup_commands": [{"cmd":"npm","args":["install"]}],
+  "setup_commands": [],
   "notes": "<one-line caveat or null>"
 }
 
@@ -354,6 +354,20 @@ Rules:
 - For Expo: framework="Expo", command="npx", args=["expo","start","--tunnel"], port=8081, notes="Scan QR with Expo Go".
 - If no dev server applies (CLI library, lambda, batch script): {"framework":"unsupported","notes":"<reason>"}.
 
+CRITICAL \u2014 setup_commands:
+- DO NOT include an install command (npm install, pnpm install, yarn install,
+  yarn, bun install) in setup_commands. A lockfile-aware pre-flight installer
+  runs BEFORE setup_commands and picks the correct package manager from the
+  lockfile present (pnpm-lock.yaml -> pnpm, yarn.lock -> yarn, bun.lockb -> bun,
+  else npm). Emitting an install here either duplicates that work or, worse,
+  uses the WRONG package manager on top of node_modules just populated by the
+  pre-flight, which crashes (e.g. npm errors with "Cannot read properties of
+  null (reading 'matches')" when run over pnpm's .pnpm/ layout).
+- ONLY include setup_commands for genuinely non-install work the project needs
+  before its dev server can boot: prisma generate, codegen, prebuild scripts,
+  database migrations against a local SQLite, etc.
+- For most projects, setup_commands should be an empty array [].
+
 OUTPUT JSON ONLY. NO MARKDOWN. NO COMMENTARY.
 `.trim();
 
@@ -472,7 +486,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.26.12",
+  version: "2.26.14",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -546,7 +560,7 @@ var package_default = {
     chokidar: "^3.6.0",
     picocolors: "^1.1.0",
     "qrcode-terminal": "^0.12.0",
-    which: "^2.0.2",
+    which: "^5.0.0",
     ws: "^8.18.0",
     zod: "^4.3.6"
   },
@@ -1115,8 +1129,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path42) {
-  return path42.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path43) {
+  return path43.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 
 // ../../node_modules/@posthog/core/dist/featureFlagUtils.mjs
@@ -3596,9 +3610,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path42, ranges, output) {
+function getContextLinesFromFile(path43, ranges, output) {
   return new Promise((resolve5) => {
-    const stream = (0, import_node_fs.createReadStream)(path42);
+    const stream = (0, import_node_fs.createReadStream)(path43);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
@@ -3613,7 +3627,7 @@ function getContextLinesFromFile(path42, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path42, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path43, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -3674,8 +3688,8 @@ function clearLineContext(frame) {
   delete frame.context_line;
   delete frame.post_context;
 }
-function shouldSkipContextLinesForFile(path42) {
-  return path42.startsWith("node:") || path42.endsWith(".min.js") || path42.endsWith(".min.cjs") || path42.endsWith(".min.mjs") || path42.startsWith("data:");
+function shouldSkipContextLinesForFile(path43) {
+  return path43.startsWith("node:") || path43.endsWith(".min.js") || path43.endsWith(".min.cjs") || path43.endsWith(".min.mjs") || path43.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame) {
   if (void 0 !== frame.lineno && frame.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -5829,7 +5843,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.26.12" : "0.0.0-dev",
+    cliVersion: true ? "2.26.14" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -9901,13 +9915,13 @@ function detectStartupBanner(lines) {
   while (artStart > 0 && BANNER_ART_RE.test(lines[artStart - 1])) artStart--;
   if (metaIdx - artStart < 2) return null;
   const pathLine = (lines[metaIdx + 1] ?? "").trim();
-  const path42 = pathLine && !BANNER_ART_RE.test(pathLine) ? pathLine : "";
+  const path43 = pathLine && !BANNER_ART_RE.test(pathLine) ? pathLine : "";
   return {
     title: "",
     subtitle: lines[metaIdx].trim(),
-    path: path42,
+    path: path43,
     startIdx: artStart,
-    endIdx: metaIdx + (path42 ? 1 : 0)
+    endIdx: metaIdx + (path43 ? 1 : 0)
   };
 }
 
@@ -11205,11 +11219,11 @@ function parseReview(stdout) {
   for (const line of lines) {
     const m = line.match(HUNK_LINE_RE);
     if (!m) continue;
-    const [, path42, lineNo, sevToken, message] = m;
-    if (!path42 || !lineNo || !message) continue;
+    const [, path43, lineNo, sevToken, message] = m;
+    if (!path43 || !lineNo || !message) continue;
     const cleanedMessage = message.trim().replace(/^[*-]\s+/, "");
     hunks.push({
-      path: path42.trim(),
+      path: path43.trim(),
       line: Number(lineNo),
       severity: sevToken ? SEVERITY_MAP[sevToken.toLowerCase()] : void 0,
       message: cleanedMessage
@@ -13845,7 +13859,7 @@ function defaultRunGit(cwd, args2) {
   });
 }
 async function discoverRepos(workingDir, maxDepth = 4) {
-  const fs33 = await import("fs/promises");
+  const fs34 = await import("fs/promises");
   const out2 = [];
   await walk(workingDir, 0);
   return out2;
@@ -13853,7 +13867,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
     if (depth > maxDepth) return;
     let entries = [];
     try {
-      const dirents = await fs33.readdir(dir, { withFileTypes: true });
+      const dirents = await fs34.readdir(dir, { withFileTypes: true });
       entries = dirents.filter((d3) => !d3.name.startsWith(".") || d3.name === ".git").map((d3) => ({ name: d3.name, isDirectory: d3.isDirectory() }));
     } catch {
       return;
@@ -14755,9 +14769,9 @@ function buildKeepAlive(ctx) {
 }
 
 // src/commands/start/handlers.ts
-var fs29 = __toESM(require("fs"));
+var fs30 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
-var path35 = __toESM(require("path"));
+var path36 = __toESM(require("path"));
 var import_crypto5 = require("crypto");
 var import_child_process15 = require("child_process");
 
@@ -16281,6 +16295,31 @@ function parseExpoUrl(stdout) {
   return match ? match[0] : null;
 }
 
+// src/services/preview/setup-deps.ts
+var import_fs2 = __toESM(require("fs"));
+var import_path6 = __toESM(require("path"));
+function detectMissingNodeDeps(cwd) {
+  if (!import_fs2.default.existsSync(import_path6.default.join(cwd, "package.json"))) return null;
+  if (import_fs2.default.existsSync(import_path6.default.join(cwd, "node_modules"))) return null;
+  if (import_fs2.default.existsSync(import_path6.default.join(cwd, "pnpm-lock.yaml"))) {
+    return { cmd: "pnpm", args: ["install"] };
+  }
+  if (import_fs2.default.existsSync(import_path6.default.join(cwd, "yarn.lock"))) {
+    return { cmd: "yarn", args: ["install"] };
+  }
+  if (import_fs2.default.existsSync(import_path6.default.join(cwd, "bun.lockb")) || import_fs2.default.existsSync(import_path6.default.join(cwd, "bun.lock"))) {
+    return { cmd: "bun", args: ["install"] };
+  }
+  return { cmd: "npm", args: ["install"] };
+}
+function isJsInstallCommand(cmd, args2) {
+  const known = ["npm", "pnpm", "yarn", "bun"];
+  if (!known.includes(cmd)) return false;
+  if (cmd === "yarn" && args2.length === 0) return true;
+  const verb = args2[0];
+  return verb === "install" || verb === "i" || verb === "ci";
+}
+
 // src/services/preview/index.ts
 var activePreviews = /* @__PURE__ */ new Map();
 function registerPreview(sessionId, preview) {
@@ -16326,7 +16365,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs29.unlinkSync(p2);
+      fs30.unlinkSync(p2);
     } catch {
     }
   }
@@ -16335,8 +16374,8 @@ function cleanupAttachmentTempFiles() {
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path35.join(os24.tmpdir(), `codeam-${(0, import_crypto5.randomUUID)()}-${safeName}`);
-    fs29.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path36.join(os24.tmpdir(), `codeam-${(0, import_crypto5.randomUUID)()}-${safeName}`);
+    fs30.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -16356,7 +16395,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs29.unlinkSync(p2);
+          fs30.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -16921,7 +16960,38 @@ var previewStartH = (ctx, _cmd, parsed) => {
       payload: { framework: detection.framework, port: detection.port }
     });
     emitProgress("ENV_DETECTED", `${detection.framework}`);
-    for (const setup of detection.setup_commands ?? []) {
+    const missingDeps = detectMissingNodeDeps(process.cwd());
+    let preflightRan = false;
+    if (missingDeps) {
+      emitProgress(
+        "SETUP_RUN",
+        `${missingDeps.cmd} ${missingDeps.args.join(" ")} (pre-flight \u2014 node_modules missing)`
+      );
+      const exitCode = await runOnce(
+        missingDeps.cmd,
+        missingDeps.args,
+        process.cwd(),
+        detection.env
+      );
+      if (exitCode !== 0) {
+        void postPreviewEvent({
+          sessionId: ctx.sessionId,
+          pluginId: ctx.pluginId,
+          pluginAuthToken,
+          type: "preview_error",
+          payload: {
+            stage: "spawn",
+            message: `Dependency install failed (${missingDeps.cmd} ${missingDeps.args.join(" ")}, exit ${exitCode}). Run it manually in this project and try again.`
+          }
+        });
+        return;
+      }
+      preflightRan = true;
+    }
+    const agentSetupCommands = preflightRan ? (detection.setup_commands ?? []).filter(
+      (s) => !isJsInstallCommand(s.cmd, s.args)
+    ) : detection.setup_commands ?? [];
+    for (const setup of agentSetupCommands) {
       emitProgress("SETUP_RUN", `${setup.cmd} ${setup.args.join(" ")}`);
       const exitCode = await runOnce(setup.cmd, setup.args, process.cwd(), detection.env);
       if (exitCode !== 0) {
@@ -17636,7 +17706,7 @@ async function autoLinkAfterPair(opts) {
 }
 
 // src/commands/pair-auto.ts
-var fs30 = __toESM(require("fs"));
+var fs31 = __toESM(require("fs"));
 var os25 = __toESM(require("os"));
 var import_crypto7 = require("crypto");
 
@@ -17805,12 +17875,12 @@ function readTokenFromArgs(args2) {
   }
   const fileFlag = args2.find((a) => a.startsWith("--token-file="));
   if (fileFlag) {
-    const path42 = fileFlag.slice("--token-file=".length);
+    const path43 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs30.readFileSync(path42, "utf8").trim();
-      if (content.length === 0) fail(`--token-file ${path42} is empty`);
+      const content = fs31.readFileSync(path43, "utf8").trim();
+      if (content.length === 0) fail(`--token-file ${path43} is empty`);
       try {
-        fs30.unlinkSync(path42);
+        fs31.unlinkSync(path43);
       } catch {
       }
       return content;
@@ -18076,7 +18146,7 @@ var import_picocolors10 = __toESM(require("picocolors"));
 var import_child_process16 = require("child_process");
 var import_util4 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
-var path36 = __toESM(require("path"));
+var path37 = __toESM(require("path"));
 var execFileP5 = (0, import_util4.promisify)(import_child_process16.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -18565,7 +18635,7 @@ var GitHubCodespacesProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path36.posix.dirname(remotePath);
+    const remoteDir = path37.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote(remoteDir)}`,
       `cat > ${shellQuote(remotePath)}`
@@ -18635,7 +18705,7 @@ function shellQuote(s) {
 // src/services/providers/gitpod.ts
 var import_child_process17 = require("child_process");
 var import_util5 = require("util");
-var path37 = __toESM(require("path"));
+var path38 = __toESM(require("path"));
 var import_picocolors9 = __toESM(require("picocolors"));
 var execFileP6 = (0, import_util5.promisify)(import_child_process17.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
@@ -18875,7 +18945,7 @@ var GitpodProvider = class {
     });
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
-    const remoteDir = path37.posix.dirname(remotePath);
+    const remoteDir = path38.posix.dirname(remotePath);
     const parts = [
       `mkdir -p ${shellQuote2(remoteDir)}`,
       `cat > ${shellQuote2(remotePath)}`
@@ -18911,7 +18981,7 @@ function shellQuote2(s) {
 // src/services/providers/gitlab-workspaces.ts
 var import_child_process18 = require("child_process");
 var import_util6 = require("util");
-var path38 = __toESM(require("path"));
+var path39 = __toESM(require("path"));
 var execFileP7 = (0, import_util6.promisify)(import_child_process18.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
@@ -19171,7 +19241,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   }
   async uploadFile(workspaceId, remotePath, contents, options = {}) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
-    const remoteDir = path38.posix.dirname(remotePath);
+    const remoteDir = path39.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote3(remoteDir)}`, `cat > ${shellQuote3(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
@@ -19239,7 +19309,7 @@ function shellQuote3(s) {
 // src/services/providers/railway.ts
 var import_child_process19 = require("child_process");
 var import_util7 = require("util");
-var path39 = __toESM(require("path"));
+var path40 = __toESM(require("path"));
 var execFileP8 = (0, import_util7.promisify)(import_child_process19.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
@@ -19475,7 +19545,7 @@ var RailwayProvider = class {
     if (!projectId || !serviceId) {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
-    const remoteDir = path39.posix.dirname(remotePath);
+    const remoteDir = path40.posix.dirname(remotePath);
     const parts = [`mkdir -p ${shellQuote4(remoteDir)}`, `cat > ${shellQuote4(remotePath)}`];
     if (options.mode != null) {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
@@ -20018,8 +20088,8 @@ async function stopWorkspaceFromLocal(target) {
 var import_node_dns = require("dns");
 var import_node_util4 = require("util");
 var import_node_crypto6 = require("crypto");
-var fs31 = __toESM(require("fs"));
-var path40 = __toESM(require("path"));
+var fs32 = __toESM(require("fs"));
+var path41 = __toESM(require("path"));
 var import_picocolors12 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util4.promisify)(import_node_dns.resolve);
 async function checkDns(apiBase) {
@@ -20075,13 +20145,13 @@ async function checkHealth(apiBase) {
   }
 }
 function checkConfigDir() {
-  const dir = path40.join(require("os").homedir(), ".codeam");
+  const dir = path41.join(require("os").homedir(), ".codeam");
   try {
-    fs31.mkdirSync(dir, { recursive: true, mode: 448 });
-    const probe = path40.join(dir, ".doctor-probe");
-    fs31.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs31.readFileSync(probe, "utf8");
-    fs31.unlinkSync(probe);
+    fs32.mkdirSync(dir, { recursive: true, mode: 448 });
+    const probe = path41.join(dir, ".doctor-probe");
+    fs32.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs32.readFileSync(probe, "utf8");
+    fs32.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -20145,7 +20215,7 @@ function checkNodePty() {
       detail: "not required on this platform"
     };
   }
-  const vendoredPath = path40.join(__dirname, "vendor", "node-pty");
+  const vendoredPath = path41.join(__dirname, "vendor", "node-pty");
   for (const target of [vendoredPath, "node-pty"]) {
     try {
       require(target);
@@ -20187,7 +20257,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.26.12" : "0.0.0-dev";
+  const cliVersion = true ? "2.26.14" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto6.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -20386,7 +20456,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.26.12" : "unknown";
+  const v = true ? "2.26.14" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -20514,9 +20584,9 @@ function tryShowSubcommandHelp(cmd, args2) {
 var _subcommandHelpKeys = Object.keys(HELPS);
 
 // src/lib/updateNotifier.ts
-var fs32 = __toESM(require("fs"));
+var fs33 = __toESM(require("fs"));
 var os26 = __toESM(require("os"));
-var path41 = __toESM(require("path"));
+var path42 = __toESM(require("path"));
 var https7 = __toESM(require("https"));
 var import_picocolors16 = __toESM(require("picocolors"));
 var PKG_NAME = "codeam-cli";
@@ -20524,12 +20594,12 @@ var REGISTRY_URL = `https://registry.npmjs.org/${PKG_NAME}/latest`;
 var TTL_MS = 24 * 60 * 60 * 1e3;
 var REQUEST_TIMEOUT_MS = 1500;
 function cachePath() {
-  const dir = path41.join(os26.homedir(), ".codeam");
-  return path41.join(dir, "update-check.json");
+  const dir = path42.join(os26.homedir(), ".codeam");
+  return path42.join(dir, "update-check.json");
 }
 function readCache() {
   try {
-    const raw = fs32.readFileSync(cachePath(), "utf8");
+    const raw = fs33.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -20540,10 +20610,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs32.mkdirSync(path41.dirname(file), { recursive: true });
+    fs33.mkdirSync(path42.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs32.writeFileSync(tmp, JSON.stringify(cache));
-    fs32.renameSync(tmp, file);
+    fs33.writeFileSync(tmp, JSON.stringify(cache));
+    fs33.renameSync(tmp, file);
   } catch {
   }
 }
@@ -20614,7 +20684,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.26.12" : null;
+  const current = true ? "2.26.14" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.26.12",
+  "version": "2.26.14",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -74,7 +74,7 @@
     "chokidar": "^3.6.0",
     "picocolors": "^1.1.0",
     "qrcode-terminal": "^0.12.0",
-    "which": "^2.0.2",
+    "which": "^5.0.0",
     "ws": "^8.18.0",
     "zod": "^4.3.6"
   },