codeam-cli 2.39.65 → 2.39.68

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.66] — 2026-06-20
+
+### Fixed
+
+- **cli:** Kill preview dev-server process group to stop port leaks (EADDRINUSE)
+
+## [2.39.65] — 2026-06-20
+
+### Added
+
+- **self-hosted:** Run sessions in AUTO mode (auto-approve permissions)
+
 ## [2.39.64] — 2026-06-20
 
 ### Added

package/dist/index.js

@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.65" : "0.0.0-dev",
+    cliVersion: true ? "2.39.68" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.65",
+  version: "2.39.68",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -14143,29 +14143,32 @@ var activePreviews = /* @__PURE__ */ new Map();
 function registerPreview(sessionId, preview) {
   activePreviews.set(sessionId, preview);
 }
-async function killPreview(sessionId) {
-  const preview = activePreviews.get(sessionId);
-  if (!preview) return;
-  if (preview.tunnel) {
+function killProcessTree(child, signal = "SIGTERM") {
+  const pid = child.pid;
+  if (pid == null) return;
+  if (process.platform !== "win32") {
     try {
-      preview.tunnel.kill("SIGTERM");
+      process.kill(-pid, signal);
+      return;
     } catch {
     }
   }
-  await new Promise((r) => setTimeout(r, 100));
   try {
-    preview.devServer.kill("SIGTERM");
+    child.kill(signal);
   } catch {
   }
+}
+async function killPreview(sessionId) {
+  const preview = activePreviews.get(sessionId);
+  if (!preview) return;
+  if (preview.tunnel) {
+    killProcessTree(preview.tunnel, "SIGTERM");
+  }
+  await new Promise((r) => setTimeout(r, 100));
+  killProcessTree(preview.devServer, "SIGTERM");
   const sigkillTimer = setTimeout(() => {
-    try {
-      preview.devServer.kill("SIGKILL");
-    } catch {
-    }
-    try {
-      preview.tunnel?.kill("SIGKILL");
-    } catch {
-    }
+    killProcessTree(preview.devServer, "SIGKILL");
+    if (preview.tunnel) killProcessTree(preview.tunnel, "SIGKILL");
   }, 250);
   sigkillTimer.unref?.();
   activePreviews.delete(sessionId);
@@ -16225,17 +16228,42 @@ var previewStartH = (ctx, _cmd, parsed) => {
         });
         return;
       }
-      void postPreviewEvent({
-        sessionId: ctx.sessionId,
-        pluginId: ctx.pluginId,
-        pluginAuthToken,
-        type: "preview_error",
-        payload: {
-          stage: "spawn",
-          message: `Port ${detection.port} is already in use by another process, so the dev server can't start there. Stop whatever is listening on port ${detection.port} and try the preview again.`
+      if (raceExisting) {
+        log.info(
+          "preview",
+          `reclaiming stale preview holding port ${detection.port} for session=${ctx.sessionId} (exit=${raceExisting.devServer.exitCode})`
+        );
+        await killPreview(ctx.sessionId);
+        const freeDeadline = Date.now() + 4e3;
+        while (await isPortListening(detection.port) && Date.now() < freeDeadline) {
+          await new Promise((r) => setTimeout(r, 200));
         }
-      });
-      return;
+        if (await isPortListening(detection.port)) {
+          void postPreviewEvent({
+            sessionId: ctx.sessionId,
+            pluginId: ctx.pluginId,
+            pluginAuthToken,
+            type: "preview_error",
+            payload: {
+              stage: "spawn",
+              message: `Port ${detection.port} is still in use after stopping the previous preview. Wait a moment and try again.`
+            }
+          });
+          return;
+        }
+      } else {
+        void postPreviewEvent({
+          sessionId: ctx.sessionId,
+          pluginId: ctx.pluginId,
+          pluginAuthToken,
+          type: "preview_error",
+          payload: {
+            stage: "spawn",
+            message: `Port ${detection.port} is already in use by another process, so the dev server can't start there. Stop whatever is listening on port ${detection.port} and try the preview again.`
+          }
+        });
+        return;
+      }
     }
     const spawnable = normalizeDetectionForSpawn(detection, process.cwd());
     emitProgress(
@@ -16245,7 +16273,14 @@ var previewStartH = (ctx, _cmd, parsed) => {
     const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
       cwd: process.cwd(),
       env: { ...process.env, ...spawnable.env ?? {} },
-      stdio: ["ignore", "pipe", "pipe"]
+      stdio: ["ignore", "pipe", "pipe"],
+      // POSIX: lead a new process group so teardown can SIGTERM the whole
+      // tree. Dev servers fork worker children that bind the port; killing
+      // only the direct child orphans them and leaks the port, so the next
+      // preview_start hits EADDRINUSE on a port we already hold. Group-kill
+      // (killProcessTree) reaps the workers too. Windows has no process
+      // groups — leave detached off there (direct kill is the only option).
+      detached: process.platform !== "win32"
     });
     emitProgress("BIND_PORT", String(detection.port));
     emitProgress("WAITING_FOR_READY", detection.ready_pattern);
@@ -16264,6 +16299,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       portProbe: isNextJs ? () => waitForPortListening(detection.port, { timeoutMs: 1e3, intervalMs: 250 }) : void 0
     });
     if (outcome.kind === "exited") {
+      killProcessTree(devServer, "SIGTERM");
       void postPreviewEvent({
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
@@ -16278,10 +16314,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       return;
     }
     if (outcome.kind === "timeout") {
-      try {
-        devServer.kill("SIGTERM");
-      } catch {
-      }
+      killProcessTree(devServer, "SIGTERM");
       void postPreviewEvent({
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
@@ -16310,10 +16343,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         }
       }
       if (!expoUrl) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -16329,10 +16359,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
       try {
         bin = await resolveCloudflared();
       } catch (e) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -16426,10 +16453,7 @@ var previewStartH = (ctx, _cmd, parsed) => {
         }
       }
       if (!parsedUrl) {
-        try {
-          devServer.kill("SIGTERM");
-        } catch {
-        }
+        killProcessTree(devServer, "SIGTERM");
         void postPreviewEvent({
           sessionId: ctx.sessionId,
           pluginId: ctx.pluginId,
@@ -17367,7 +17391,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.65" : null;
+  const current = true ? "2.39.68" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17772,7 +17796,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.39.65" : null;
+  return true ? "2.39.68" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -17843,6 +17867,20 @@ var defaultDisableService = () => {
   } catch {
   }
 };
+var defaultTeardownHeadroom = () => {
+  try {
+    const kind = JSON.parse(fs39.readFileSync(headroomConfigPath(), "utf8")).agent;
+    if (kind) {
+      (0, import_node_child_process13.execFileSync)("headroom", ["unwrap", kind], { stdio: "ignore", timeout: 15e3 });
+    }
+  } catch {
+  }
+  try {
+    (0, import_node_child_process13.execFileSync)("pkill", ["-TERM", "-f", "headroom.*proxy"], { stdio: "ignore" });
+  } catch {
+  }
+  persistHeadroomConfig({ enabled: false });
+};
 var HostAgentSupervisor = class {
   constructor(identity, deps = {}) {
     this.identity = identity;
@@ -17853,6 +17891,7 @@ var HostAgentSupervisor = class {
     this.metrics = deps.metricsCollector ?? new MetricsCollector();
     this.onIdentityRejected = deps.onIdentityRejected ?? defaultOnIdentityRejected;
     this.disableService = deps.disableService ?? defaultDisableService;
+    this.teardownHeadroom = deps.teardownHeadroom ?? defaultTeardownHeadroom;
     this.selfUpdate = deps.selfUpdate ?? runSelfUpdate;
     this.onUpdated = deps.onUpdated ?? defaultOnUpdated;
   }
@@ -17886,6 +17925,7 @@ var HostAgentSupervisor = class {
   onIdentityRejected;
   /** Best-effort systemd de-provision used by `self_hosted_wipe`. */
   disableService;
+  teardownHeadroom;
   /** Guards against firing the self-heal more than once. */
   healing = false;
   /**
@@ -18083,6 +18123,7 @@ var HostAgentSupervisor = class {
     if (cmd.type === "self_hosted_wipe") {
       log.warn("host-agent", `self_hosted_wipe received id=${cmd.id} \u2014 de-provisioning`);
       this.stop();
+      this.teardownHeadroom();
       this.disableService();
       if (!this.healing) {
         this.healing = true;
@@ -21771,6 +21812,13 @@ var AcpClient = class {
     if (!this.connection) {
       throw new Error("AcpClient.loadSession called before start()");
     }
+    if (sessionId === this.sessionId) {
+      log.info(
+        "acpClient",
+        `loadSession skipped \u2014 already the active session (${sessionId.slice(0, 8)})`
+      );
+      return;
+    }
     log.info("acpClient", `loadSession \u2192 sessionId=${sessionId.slice(0, 8)}`);
     await this.connection.loadSession({
       sessionId,
@@ -28387,7 +28435,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.65" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.68" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -28586,7 +28634,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.65" : "unknown";
+  const v = true ? "2.39.68" : "unknown";
   console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.65",
+  "version": "2.39.68",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",