codeam-cli 2.39.52 → 2.39.54

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.53] — 2026-06-20
+
+### Added
+
+- **cli:** Self-hosted headroom auto-provisions a bare environment
+
+## [2.39.52] — 2026-06-20
+
+### Added
+
+- **cli:** Set up Headroom on self-hosted deploys
+
 ## [2.39.51] — 2026-06-20
 
 ### Fixed

package/dist/index.js

@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.52" : "0.0.0-dev",
+    cliVersion: true ? "2.39.54" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.52",
+  version: "2.39.54",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -17269,79 +17269,220 @@ var CONTROL_AGENT_META = {
   supportedAuthKinds: ["oauth_token"],
   preferredAuthKind: "oauth_token"
 };
-async function setupHeadroomForSelfHosted(agent) {
-  const INSTALL_TIMEOUT_MS2 = 12e4;
-  const PIP_PACKAGES = [
-    "headroom-ai",
-    "fastapi",
-    "uvicorn",
-    "httpx[http2]",
-    "websockets",
-    "zstandard"
-  ];
-  const installOk = await new Promise((resolve7) => {
-    const tryPip = (cmd) => new Promise((res) => {
-      const child = (0, import_node_child_process12.spawn)(cmd, ["install", "--quiet", ...PIP_PACKAGES], {
-        stdio: ["ignore", "pipe", "pipe"]
-      });
+var PEP668_MARKER = "externally-managed-environment";
+var PM_INSTALL_TIMEOUT_MS = 18e4;
+var PIP_INSTALL_TIMEOUT_MS = 12e4;
+var defaultHeadroomRunner = {
+  which(cmd) {
+    try {
+      (0, import_node_child_process12.execFileSync)("which", [cmd], { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  },
+  run(cmd, args2, opts = {}) {
+    return new Promise((resolve7) => {
+      const child = (0, import_node_child_process12.spawn)(cmd, args2, { stdio: ["ignore", "pipe", "pipe"] });
+      let stderrBuf = "";
       let settled = false;
-      const done = (ok) => {
+      const done = (code) => {
         if (settled) return;
         settled = true;
-        res(ok);
+        resolve7({ code, stderr: stderrBuf });
       };
-      const onData = (b) => {
-        const line = b.toString().replace(/\n+$/g, "");
-        if (line) log.info("host-agent", `headroom-install: ${line}`);
-      };
-      child.stdout?.on("data", onData);
-      child.stderr?.on("data", onData);
-      const timer = setTimeout(() => {
-        log.warn("host-agent", `headroom pip install timed out (${INSTALL_TIMEOUT_MS2 / 1e3}s) \u2014 skipping Headroom`);
-        try {
-          child.kill("SIGTERM");
-        } catch {
-        }
-        done(false);
-      }, INSTALL_TIMEOUT_MS2);
+      child.stdout?.on("data", (b) => {
+        const line = b.toString().replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      child.stderr?.on("data", (b) => {
+        const chunk = b.toString();
+        stderrBuf += chunk;
+        const line = chunk.replace(/\n+$/, "");
+        if (line) log.info("host-agent", `headroom[${cmd}]: ${line}`);
+      });
+      const timeoutMs = opts.timeoutMs;
+      let timer;
+      if (timeoutMs !== void 0) {
+        timer = setTimeout(() => {
+          log.warn("host-agent", `headroom[${cmd}] timed out after ${timeoutMs / 1e3}s \u2014 aborting`);
+          try {
+            child.kill("SIGTERM");
+          } catch {
+          }
+          done(null);
+        }, timeoutMs);
+      }
       child.once("exit", (code) => {
-        clearTimeout(timer);
-        if (code === 0) {
-          log.info("host-agent", "headroom pip install succeeded");
-        } else {
-          log.warn("host-agent", `headroom pip install exited code=${String(code)} \u2014 skipping Headroom`);
-        }
-        done(code === 0);
+        if (timer !== void 0) clearTimeout(timer);
+        done(code);
       });
       child.once("error", (e) => {
-        clearTimeout(timer);
-        done(false);
-        log.trace("host-agent", `headroom pip spawn error (${cmd}): ${e.message}`);
+        if (timer !== void 0) clearTimeout(timer);
+        log.trace("host-agent", `headroom[${cmd}] spawn error: ${e.message}`);
+        done(null);
       });
     });
-    tryPip("pip").then((ok) => ok ? resolve7(true) : tryPip("pip3").then(resolve7)).catch(() => resolve7(false));
-  });
+  }
+};
+var PACKAGE_MANAGERS = [
+  "apt-get",
+  "apk",
+  "dnf",
+  "yum",
+  "pacman",
+  "zypper"
+];
+var PROVISION_RECIPES = {
+  "apt-get": {
+    update: ["apt-get", "update"],
+    install: ["apt-get", "install", "-y", "python3", "python3-pip", "python3-venv", "ca-certificates", "curl"]
+  },
+  apk: {
+    install: ["apk", "add", "--no-cache", "python3", "py3-pip", "ca-certificates", "curl"]
+  },
+  dnf: {
+    install: ["dnf", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  yum: {
+    install: ["yum", "install", "-y", "python3", "python3-pip", "ca-certificates", "curl"]
+  },
+  pacman: {
+    install: ["pacman", "-Sy", "--noconfirm", "python", "python-pip", "ca-certificates", "curl"]
+  },
+  zypper: {
+    install: ["zypper", "--non-interactive", "install", "python3", "python3-pip", "ca-certificates", "curl"]
+  }
+};
+function detectPackageManager(runner) {
+  for (const pm of PACKAGE_MANAGERS) {
+    if (runner.which(pm)) return pm;
+  }
+  return null;
+}
+async function ensurePip(runner) {
+  if (runner.which("pip") || runner.which("pip3")) {
+    return true;
+  }
+  const pm = detectPackageManager(runner);
+  if (!pm) {
+    log.warn(
+      "host-agent",
+      "pip is absent and no known package manager (apt-get/apk/dnf/yum/pacman/zypper) found \u2014 skipping Headroom"
+    );
+    return false;
+  }
+  const isRoot = process.getuid?.() === 0;
+  const escalate = (argv) => isRoot ? { cmd: argv[0], args: argv.slice(1) } : { cmd: "sudo", args: argv };
+  const recipe = PROVISION_RECIPES[pm];
+  log.info(
+    "host-agent",
+    `pip absent \u2014 provisioning bare box (python3+pip+ca-certificates+curl) via ${pm}`
+  );
+  try {
+    if (recipe.update) {
+      const { cmd: cmd2, args: args3 } = escalate(recipe.update);
+      const updateResult = await runner.run(cmd2, args3, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+      if (updateResult.code !== 0) {
+        log.warn(
+          "host-agent",
+          `${pm} update exited ${String(updateResult.code)} \u2014 attempting install anyway`
+        );
+      }
+    }
+    const { cmd, args: args2 } = escalate(recipe.install);
+    const installResult = await runner.run(cmd, args2, { timeoutMs: PM_INSTALL_TIMEOUT_MS });
+    if (installResult.code !== 0) {
+      log.warn(
+        "host-agent",
+        `${pm} bare-box provision failed (code=${String(installResult.code)}) \u2014 skipping Headroom`
+      );
+      return false;
+    }
+  } catch (e) {
+    log.warn(
+      "host-agent",
+      `bare-box provision threw unexpectedly: ${e instanceof Error ? e.message : String(e)} \u2014 skipping Headroom`
+    );
+    return false;
+  }
+  log.info("host-agent", `bare box provisioned via ${pm} (python3+pip+ca-certificates+curl)`);
+  return true;
+}
+function agentIdToHeadroomKind(agentId) {
+  const normalized = (agentId ?? "").toLowerCase().replace(/[_-]/g, "");
+  if (normalized.startsWith("claude")) return "claude";
+  if (normalized.startsWith("codex")) return "codex";
+  if (normalized.startsWith("copilot")) return "copilot";
+  return "claude";
+}
+async function setupHeadroomForSelfHosted(agent, runner = defaultHeadroomRunner) {
+  const PIP_PACKAGES = [
+    "headroom-ai",
+    "fastapi",
+    "uvicorn",
+    "httpx[http2]",
+    "websockets",
+    "zstandard"
+  ];
+  const pipAvailable = await ensurePip(runner);
+  if (!pipAvailable) {
+    return false;
+  }
+  const installOk = await (async () => {
+    const baseArgs = ["-m", "pip", "install", "--quiet", ...PIP_PACKAGES];
+    const firstResult = await runner.run("python3", baseArgs, {
+      timeoutMs: PIP_INSTALL_TIMEOUT_MS
+    });
+    if (firstResult.code === 0) {
+      log.info("host-agent", "headroom pip install succeeded");
+      return true;
+    }
+    if (firstResult.stderr.includes(PEP668_MARKER)) {
+      log.info(
+        "host-agent",
+        "PEP 668 externally-managed-environment detected \u2014 retrying with --break-system-packages"
+      );
+      const retryResult = await runner.run(
+        "python3",
+        [...baseArgs, "--break-system-packages"],
+        { timeoutMs: PIP_INSTALL_TIMEOUT_MS }
+      );
+      if (retryResult.code === 0) {
+        log.info("host-agent", "headroom pip install succeeded (--break-system-packages)");
+        return true;
+      }
+      log.warn(
+        "host-agent",
+        `headroom pip install failed even with --break-system-packages (code=${String(retryResult.code)}) \u2014 skipping Headroom`
+      );
+      return false;
+    }
+    log.warn(
+      "host-agent",
+      `headroom pip install exited code=${String(firstResult.code)} \u2014 skipping Headroom`
+    );
+    return false;
+  })();
   if (!installOk) {
     return false;
   }
+  if (!runner.which("headroom")) {
+    log.warn("host-agent", "headroom not found on PATH after install \u2014 skipping init");
+    return false;
+  }
+  const initKind = agentIdToHeadroomKind(agent);
   const initOk = await new Promise((resolve7) => {
-    (0, import_node_child_process12.execFile)("which", ["headroom"], (whichErr) => {
-      if (whichErr) {
-        log.warn("host-agent", "headroom not found on PATH after install \u2014 skipping init");
+    (0, import_node_child_process12.execFile)("headroom", ["init", "--global", initKind], (initErr, stdout, stderr) => {
+      if (initErr) {
+        const detail = (stderr || initErr.message).replace(/\n+$/g, "");
+        log.warn("host-agent", `headroom init failed (best-effort): ${detail}`);
         resolve7(false);
-        return;
+      } else {
+        if (stdout.trim()) log.info("host-agent", `headroom init: ${stdout.trim()}`);
+        log.info("host-agent", "headroom init --global succeeded");
+        resolve7(true);
       }
-      (0, import_node_child_process12.execFile)("headroom", ["init", "--global", agent], (initErr, stdout, stderr) => {
-        if (initErr) {
-          const detail = (stderr || initErr.message).replace(/\n+$/g, "");
-          log.warn("host-agent", `headroom init failed (best-effort): ${detail}`);
-          resolve7(false);
-        } else {
-          if (stdout.trim()) log.info("host-agent", `headroom init: ${stdout.trim()}`);
-          log.info("host-agent", "headroom init --global succeeded");
-          resolve7(true);
-        }
-      });
     });
   });
   if (!initOk) {
@@ -17569,7 +17710,7 @@ var HostAgentSupervisor = class {
         const headroomOk = await this.setupHeadroom(payload.headroomAgent);
         if (headroomOk) {
           childEnv.HEADROOM_ENABLED = "1";
-          childEnv.HEADROOM_AGENT = payload.headroomAgent;
+          childEnv.HEADROOM_AGENT = agentIdToHeadroomKind(payload.headroomAgent);
           childEnv.HEADROOM_SAVINGS_INGEST_URL = payload.headroomSavingsIngestUrl;
           log.info("host-agent", "Headroom proxy ready; HEADROOM_* env injected into child");
         } else {
@@ -27711,7 +27852,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.52" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.54" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -27910,7 +28051,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.52" : "unknown";
+  const v = true ? "2.39.54" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -28196,7 +28337,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.52" : null;
+  const current = true ? "2.39.54" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.52",
+  "version": "2.39.54",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",