codeam-cli 2.39.64 → 2.39.66

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.65] — 2026-06-20
+
+### Added
+
+- **self-hosted:** Run sessions in AUTO mode (auto-approve permissions)
+
+## [2.39.64] — 2026-06-20
+
+### Added
+
+- **host-agent:** Handle self_hosted_refresh_credentials (in-place re-auth)
+
 ## [2.39.63] — 2026-06-20
 
 ### Added

package/dist/index.js

@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.64" : "0.0.0-dev",
+    cliVersion: true ? "2.39.66" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.64",
+  version: "2.39.66",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -14143,29 +14143,32 @@ var activePreviews = /* @__PURE__ */ new Map();
 function registerPreview(sessionId, preview) {
   activePreviews.set(sessionId, preview);
 }
-async function killPreview(sessionId) {
-  const preview = activePreviews.get(sessionId);
-  if (!preview) return;
-  if (preview.tunnel) {
+function killProcessTree(child, signal = "SIGTERM") {
+  const pid = child.pid;
+  if (pid == null) return;
+  if (process.platform !== "win32") {
     try {
-      preview.tunnel.kill("SIGTERM");
+      process.kill(-pid, signal);
+      return;
     } catch {
     }
   }
-  await new Promise((r) => setTimeout(r, 100));
   try {
-    preview.devServer.kill("SIGTERM");
+    child.kill(signal);
   } catch {
   }
+}
+async function killPreview(sessionId) {
+  const preview = activePreviews.get(sessionId);
+  if (!preview) return;
+  if (preview.tunnel) {
+    killProcessTree(preview.tunnel, "SIGTERM");
+  }
+  await new Promise((r) => setTimeout(r, 100));
+  killProcessTree(preview.devServer, "SIGTERM");
   const sigkillTimer = setTimeout(() => {
-    try {
-      preview.devServer.kill("SIGKILL");
-    } catch {
-    }
-    try {
-      preview.tunnel?.kill("SIGKILL");
-    } catch {
-    }
+    killProcessTree(preview.devServer, "SIGKILL");
+    if (preview.tunnel) killProcessTree(preview.tunnel, "SIGKILL");
   }, 250);
   sigkillTimer.unref?.();
   activePreviews.delete(sessionId);
@@ -16225,17 +16228,42 @@ var previewStartH = (ctx, _cmd, parsed) => {
         });
         return;
       }
-      void postPreviewEvent({
-        sessionId: ctx.sessionId,
-        pluginId: ctx.pluginId,
-        pluginAuthToken,
-        type: "preview_error",
-        payload: {
-          stage: "spawn",
-          message: `Port ${detection.port} is already in use by another process, so the dev server can't start there. Stop whatever is listening on port ${detection.port} and try the preview again.`
+      if (raceExisting) {
+        log.info(
+          "preview",
+          `reclaiming stale preview holding port ${detection.port} for session=${ctx.sessionId} (exit=${raceExisting.devServer.exitCode})`
+        );
+        await killPreview(ctx.sessionId);
+        const freeDeadline = Date.now() + 4e3;
+        while (await isPortListening(detection.port) && Date.now() < freeDeadline) {
+          await new Promise((r) => setTimeout(r, 200));
         }
-      });
-      return;
+        if (await isPortListening(detection.port)) {
+          void postPreviewEvent({
+            sessionId: ctx.sessionId,
+            pluginId: ctx.pluginId,
+            pluginAuthToken,
+            type: "preview_error",
+            payload: {
+              stage: "spawn",
+              message: `Port ${detection.port} is still in use after stopping the previous preview. Wait a moment and try again.`
+            }
+          });
+          return;
+        }
+      } else {
+        void postPreviewEvent({
+          sessionId: ctx.sessionId,
+          pluginId: ctx.pluginId,
+          pluginAuthToken,
+          type: "preview_error",
+          payload: {
+            stage: "spawn",
+            message: `Port ${detection.port} is already in use by another process, so the dev server can't start there. Stop whatever is listening on port ${detection.port} and try the preview again.`
+          }
+        });
+        return;
+      }
     }
     const spawnable = normalizeDetectionForSpawn(detection, process.cwd());
     emitProgress(
@@ -16245,7 +16273,14 @@ var previewStartH = (ctx, _cmd, parsed) => {
     const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
       cwd: process.cwd(),
       env: { ...process.env, ...spawnable.env ?? {} },
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      // POSIX: lead a new process group so teardown can SIGTERM the whole
+      // tree. Dev servers fork worker children that bind the port; killing
+      // only the direct child orphans them and leaks the port, so the next
+      // preview_start hits EADDRINUSE on a port we already hold. Group-kill
+      // (killProcessTree) reaps the workers too. Windows has no process
+      // groups — leave detached off there (direct kill is the only option).
+      detached: process.platform !== "win32"
     });
     emitProgress("BIND_PORT", String(detection.port));
     emitProgress("WAITING_FOR_READY", detection.ready_pattern);
@@ -16264,6 +16299,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       portProbe: isNextJs ? () => waitForPortListening(detection.port, { timeoutMs: 1e3, intervalMs: 250 }) : void 0
     });
     if (outcome.kind === "exited") {
+      killProcessTree(devServer, "SIGTERM");
       void postPreviewEvent({
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
@@ -16278,10 +16314,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       return;
     }
     if (outcome.kind === "timeout") {
-      try {
-        devServer.kill("SIGTERM");
-      } catch {
-      }
+      killProcessTree(devServer, "SIGTERM");
       void postPreviewEvent({
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
@@ -16310,10 +16343,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         }
       }
       if (!expoUrl) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -16329,10 +16359,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       try {
         bin = await resolveCloudflared();
       } catch (e) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -16426,10 +16453,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         }
       }
       if (!parsedUrl) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -17367,7 +17391,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.64" : null;
+  const current = true ? "2.39.66" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17772,7 +17796,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.39.64" : null;
+  return true ? "2.39.66" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -18145,6 +18169,7 @@ var HostAgentSupervisor = class {
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
       }
+      childEnv = { ...childEnv, CODEAM_AUTO_APPROVE: "1" };
       if (payload.agentInstallScript) {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
@@ -25718,10 +25743,13 @@ async function start(requestedAgent) {
       adapter,
       cwd,
       getBeads,
-      // AUTO mode in a headless GitHub Codespace: no human at the phone to
-      // answer permission prompts, so auto-approve them rather than stall the
-      // turn (the agent-agnostic equivalent of --dangerously-skip-permissions).
-      autoApprovePermissions: process.env.CODESPACES === "true"
+      // AUTO mode for headless, mobile-driven sessions: no human at the box
+      // to answer permission prompts, so auto-approve them rather than stall
+      // the turn (the agent-agnostic equivalent of
+      // --dangerously-skip-permissions). Both surfaces qualify — a GitHub
+      // Codespace (`CODESPACES=true`) and a self-hosted deploy (the host-agent
+      // sets `CODEAM_AUTO_APPROVE=1` on the pair-auto child).
+      autoApprovePermissions: process.env.CODESPACES === "true" || process.env.CODEAM_AUTO_APPROVE === "1"
     });
     return;
   }
@@ -28383,7 +28411,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.64" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.66" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -28582,7 +28610,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.64" : "unknown";
+  const v = true ? "2.39.66" : "unknown";
   console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.64",
+  "version": "2.39.66",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",