codeam-cli 2.39.51 → 2.39.53

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.52] — 2026-06-20
+
+### Added
+
+- **cli:** Set up Headroom on self-hosted deploys
+
+## [2.39.51] — 2026-06-20
+
+### Fixed
+
+- **cli:** Reuse running preview on re-open instead of re-spawn (EADDRINUSE)
+
 ## [2.39.50] — 2026-06-19
 
 ### Fixed

package/dist/index.js

@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.51" : "0.0.0-dev",
+    cliVersion: true ? "2.39.53" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.51",
+  version: "2.39.53",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -17245,6 +17245,15 @@ function isDeployPayload(p2) {
   if (p2.cloneToken !== void 0 && typeof p2.cloneToken !== "string") {
     return false;
   }
+  if (p2.headroomEnabled !== void 0 && typeof p2.headroomEnabled !== "boolean") {
+    return false;
+  }
+  if (p2.headroomAgent !== void 0 && typeof p2.headroomAgent !== "string") {
+    return false;
+  }
+  if (p2.headroomSavingsIngestUrl !== void 0 && typeof p2.headroomSavingsIngestUrl !== "string") {
+    return false;
+  }
   const hasHouse = isHouseProxy(p2.houseProxy);
   const hasSealed = typeof p2.sealedAgentAuth === "string";
   return hasHouse || hasSealed;
@@ -17260,6 +17269,228 @@ var CONTROL_AGENT_META = {
   supportedAuthKinds: ["oauth_token"],
   preferredAuthKind: "oauth_token"
 };
+var PEP668_MARKER = "externally-managed-environment";
+var PM_INSTALL_TIMEOUT_MS = 18e4;
+var PIP_INSTALL_TIMEOUT_MS = 12e4;
+var defaultHeadroomRunner = {
+  which(cmd) {
+    try {
+      (0, import_node_child_process12.execFileSync)("which", [cmd], { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  run(cmd, args2, opts = {}) {
+    return new Promise((resolve7) => {
+      const child = (0, import_node_child_process12.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
+      let stderrBuf = "";
+      let settled = false;
+      const done = (code) => {
+        if (settled) return;
+        settled = true;
+        resolve7({ code, stderr: stderrBuf });
+      };
+      child.stdout?.on("data", (b) => {
+        const line = b.toString().replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      child.stderr?.on("data", (b) => {
+        const chunk = b.toString();
+        stderrBuf += chunk;
+        const line = chunk.replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      const timeoutMs = opts.timeoutMs;
+      let timer;
+      if (timeoutMs !== void 0) {
+        timer = setTimeout(() => {
+          log.warn("host-agent", `headroom[${cmd}] timed out after ${timeoutMs / 1e3}s \u2014 aborting`);
+          try {
+            child.kill("SIGTERM");
+          } catch {
+          }
+          done(null);
+        }, timeoutMs);
+      }
+      child.once("exit", (code) => {
+        if (timer !== void 0) clearTimeout(timer);
+        done(code);
+      });
+      child.once("error", (e) => {
+        if (timer !== void 0) clearTimeout(timer);
+        log.trace("host-agent", `headroom[${cmd}] spawn error: ${e.message}`);
+        done(null);
+      });
+    });
+  }
+};
+var PACKAGE_MANAGERS = [
+  "apt-get",
+  "apk",
+  "dnf",
+  "yum",
+  "pacman",
+  "zypper"
+];
+var PROVISION_RECIPES = {
+  "apt-get": {
+    update: ["apt-get", "update"],
+    install: ["apt-get", "install", "-y", "python3", "python3-pip", "python3-venv", "ca-certificates", "curl"]
+  },
+  apk: {
+    install: ["apk", "add", "--no-cache", "python3", "py3-pip", "ca-certificates", "curl"]
+  },
+  dnf: {
+    install: ["dnf", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  yum: {
+    install: ["yum", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  pacman: {
+    install: ["pacman", "-Sy", "--noconfirm", "python", "python-pip", "ca-certificates", "curl"]
+  },
+  zypper: {
+    install: ["zypper", "--non-interactive", "install", "python3", "python3-pip", "ca-certificates", "curl"]
+  }
+};
+function detectPackageManager(runner) {
+  for (const pm of PACKAGE_MANAGERS) {
+    if (runner.which(pm)) return pm;
+  }
+  return null;
+}
+async function ensurePip(runner) {
+  if (runner.which("pip") || runner.which("pip3")) {
+    return true;
+  }
+  const pm = detectPackageManager(runner);
+  if (!pm) {
+    log.warn(
+      "host-agent",
+      "pip is absent and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) found \u2014 skipping Headroom"
+    );
+    return false;
+  }
+  const isRoot = process.getuid?.() === 0;
+  const escalate = (argv) => isRoot ? { cmd: argv[0], args: argv.slice(1) } : { cmd: "sudo", args: argv };
+  const recipe = PROVISION_RECIPES[pm];
+  log.info(
+    "host-agent",
+    `pip absent \u2014 provisioning bare box (python3+pip+ca-certificates+curl) via ${pm}`
+  );
+  try {
+    if (recipe.update) {
+      const { cmd: cmd2, args: args3 } = escalate(recipe.update);
+      const updateResult = await runner.run(cmd2, args3, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+      if (updateResult.code !== 0) {
+        log.warn(
+          "host-agent",
+          `${pm} update exited ${String(updateResult.code)} \u2014 attempting install anyway`
+        );
+      }
+    }
+    const { cmd, args: args2 } = escalate(recipe.install);
+    const installResult = await runner.run(cmd, args2, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+    if (installResult.code !== 0) {
+      log.warn(
+        "host-agent",
+        `${pm} bare-box provision failed (code=${String(installResult.code)}) \u2014 skipping Headroom`
+      );
+      return false;
+    }
+  } catch (e) {
+    log.warn(
+      "host-agent",
+      `bare-box provision threw unexpectedly: ${e instanceof Error ? e.message : String(e)} \u2014 skipping Headroom`
+    );
+    return false;
+  }
+  log.info("host-agent", `bare box provisioned via ${pm} (python3+pip+ca-certificates+curl)`);
+  return true;
+}
+async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner) {
+  const PIP_PACKAGES = [
+    "headroom-ai",
+    "fastapi",
+    "uvicorn",
+    "httpx[http2]",
+    "websockets",
+    "zstandard"
+  ];
+  const pipAvailable = await ensurePip(runner);
+  if (!pipAvailable) {
+    return false;
+  }
+  const installOk = await (async () => {
+    const baseArgs = ["-m", "pip", "install", "--quiet", ...PIP_PACKAGES];
+    const firstResult = await runner.run("python3", baseArgs, {
+      timeoutMs: PIP_INSTALL_TIMEOUT_MS
+    });
+    if (firstResult.code === 0) {
+      log.info("host-agent", "headroom pip install succeeded");
+      return true;
+    }
+    if (firstResult.stderr.includes(PEP668_MARKER)) {
+      log.info(
+        "host-agent",
+        "PEP 668 externally-managed-environment detected \u2014 retrying with --break-system-packages"
+      );
+      const retryResult = await runner.run(
+        "python3",
+        [...baseArgs, "--break-system-packages"],
+        { timeoutMs: PIP_INSTALL_TIMEOUT_MS }
+      );
+      if (retryResult.code === 0) {
+        log.info("host-agent", "headroom pip install succeeded (--break-system-packages)");
+        return true;
+      }
+      log.warn(
+        "host-agent",
+        `headroom pip install failed even with --break-system-packages (code=${String(retryResult.code)}) \u2014 skipping Headroom`
+      );
+      return false;
+    }
+    log.warn(
+      "host-agent",
+      `headroom pip install exited code=${String(firstResult.code)} \u2014 skipping Headroom`
+    );
+    return false;
+  })();
+  if (!installOk) {
+    return false;
+  }
+  if (!runner.which("headroom")) {
+    log.warn("host-agent", "headroom not found on PATH after install \u2014 skipping init");
+    return false;
+  }
+  const initOk = await new Promise((resolve7) => {
+    (0, import_node_child_process12.execFile)("headroom", ["init", "--global", agent], (initErr, stdout, stderr) => {
+      if (initErr) {
+        const detail = (stderr || initErr.message).replace(/\n+$/g, "");
+        log.warn("host-agent", `headroom init failed (best-effort): ${detail}`);
+        resolve7(false);
+      } else {
+        if (stdout.trim()) log.info("host-agent", `headroom init: ${stdout.trim()}`);
+        log.info("host-agent", "headroom init --global succeeded");
+        resolve7(true);
+      }
+    });
+  });
+  if (!initOk) {
+    return false;
+  }
+  try {
+    const proxy = (0, import_node_child_process12.spawn)("headroom", ["proxy", "--port", "8787"], {
+      stdio: "ignore",
+      detached: true
+    });
+    proxy.unref();
+  } catch (e) {
+    log.warn("host-agent", `headroom proxy warm-start failed (best-effort): ${e instanceof Error ? e.message : String(e)}`);
+  }
+  return true;
+}
 var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process12.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
@@ -17283,6 +17514,7 @@ var HostAgentSupervisor = class {
     this.deps = deps;
     this.spawnChild = deps.spawnChild ?? defaultSpawner;
     this.resolveAgentAuth = deps.resolveAgentAuth ?? unsealAgentAuth;
+    this.setupHeadroom = deps.setupHeadroom ?? setupHeadroomForSelfHosted;
     this.metrics = deps.metricsCollector ?? new MetricsCollector();
     this.onIdentityRejected = deps.onIdentityRejected ?? defaultOnIdentityRejected;
     this.disableService = deps.disableService ?? defaultDisableService;
@@ -17292,6 +17524,7 @@ var HostAgentSupervisor = class {
   children = /* @__PURE__ */ new Map();
   spawnChild;
   resolveAgentAuth;
+  setupHeadroom;
   relay = null;
   heartbeatTimer = null;
   /** Guards the one-shot 'connected' telemetry on the first heartbeat. */
@@ -17464,6 +17697,18 @@ var HostAgentSupervisor = class {
         childEnv.PREVIEW_TUNNEL_TOKEN = payload.previewTunnelToken;
         childEnv.PREVIEW_TUNNEL_HOSTNAME = payload.previewHostname;
       }
+      if (payload.headroomEnabled && payload.headroomAgent && payload.headroomSavingsIngestUrl) {
+        report("headroom", "setting up Headroom proxy");
+        const headroomOk = await this.setupHeadroom(payload.headroomAgent);
+        if (headroomOk) {
+          childEnv.HEADROOM_ENABLED = "1";
+          childEnv.HEADROOM_AGENT = payload.headroomAgent;
+          childEnv.HEADROOM_SAVINGS_INGEST_URL = payload.headroomSavingsIngestUrl;
+          log.info("host-agent", "Headroom proxy ready; HEADROOM_* env injected into child");
+        } else {
+          log.warn("host-agent", "Headroom setup failed (best-effort) \u2014 child will run without Headroom");
+        }
+      }
       report("spawning", "starting agent");
       const proc = this.spawnChild(childEnv, cwd, extraArgs);
       const child = { deployId: payload.deployId, proc };
@@ -27373,9 +27618,9 @@ async function probeCodeamPair(provider, workspace) {
 }
 async function stopWorkspaceFromLocal(target) {
   if (target.provider.id === "github-codespaces") {
-    const { execFile: execFile11 } = await import("child_process");
+    const { execFile: execFile12 } = await import("child_process");
     const { promisify: promisify11 } = await import("util");
-    const execFileP10 = promisify11(execFile11);
+    const execFileP10 = promisify11(execFile12);
     await execFileP10("gh", ["codespace", "stop", "-c", target.id], { maxBuffer: 8 * 1024 * 1024 });
     return;
   }
@@ -27599,7 +27844,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.51" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.53" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -27798,7 +28043,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.51" : "unknown";
+  const v = true ? "2.39.53" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -28084,7 +28329,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.51" : null;
+  const current = true ? "2.39.53" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.51",
+  "version": "2.39.53",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",