codeam-cli 2.49.3 → 2.49.5

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.49.4] — 2026-06-27
+
+### Fixed
+
+- **cli:** Serialize Headroom SSE event POSTs to preserve emit order
+
+## [2.49.3] — 2026-06-27
+
+### Fixed
+
+- **cli:** Resolve a Python ≥3.10 for Headroom install (avoid macOS Xcode py3.9)
+- **cli:** Auto-install Python ≥3.10 for Headroom when none present
+- **cli:** Capture stdout in headroom runner so the python ≥3.10 probe works
+- **cli:** Require pip in the headroom python probe (skip pip-less newest python)
+
 ## [2.49.2] — 2026-06-27
 
 ### Fixed

package/dist/index.js

@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.49.3" : "0.0.0-dev",
+    cliVersion: true ? "2.49.5" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.49.3",
+  version: "2.49.5",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -14747,7 +14747,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.49.3" : null;
+  const current = true ? "2.49.5" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14764,7 +14764,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.49.3" : null;
+  const current = true ? "2.49.5" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14827,6 +14827,51 @@ function maybeStartHeadroomReporter(ctx) {
     return null;
   }
 }
+function maybeResumeLocalHeadroomReporter(ctx) {
+  if (process.env["HEADROOM_ENABLED"] === "1") return null;
+  try {
+    const file = headroomConfigPath();
+    if (!fs31.existsSync(file)) return null;
+    const cfg = JSON.parse(fs31.readFileSync(file, "utf8"));
+    if (!cfg?.enabled) return null;
+    const agent = cfg.agent ?? "claude";
+    const ingestUrl = `${resolveApiBaseUrl()}/api/sessions/${ctx.sessionId}/headroom-savings`;
+    const reporter = new HeadroomStatsReporter({
+      inputPricePerMillionUsd: resolveInputPricePerMillion(agent),
+      fetchStats: async () => {
+        const res = await fetch("http://localhost:8787/stats");
+        return res.json();
+      },
+      // Body MUST match HeadroomSavingsDto + PluginAuthGuard (sessionId +
+      // pluginId in the body) — same shape as the codespace reporter above and
+      // the on-demand `startReporter` in handlers.ts.
+      postSavings: async (delta) => {
+        await fetch(ingestUrl, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "X-Plugin-Auth-Token": ctx.pluginAuthToken
+          },
+          body: JSON.stringify({
+            sessionId: ctx.sessionId,
+            pluginId: ctx.pluginId,
+            agentId: agent,
+            savings: delta
+          })
+        });
+      }
+    });
+    reporter.start();
+    log.info("headroom", "resumed on-demand local savings reporter from config");
+    return reporter;
+  } catch (err) {
+    log.warn(
+      "headroom",
+      `failed to resume local Headroom reporter (best-effort): ${err instanceof Error ? err.message : String(err)}`
+    );
+    return null;
+  }
+}
 function isRefreshCredentialsPayload(p2) {
   return typeof p2.agentId === "string" && typeof p2.sealedAgentAuth === "string";
 }
@@ -15400,7 +15445,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process14.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.49.3" : null;
+  return true ? "2.49.5" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -18315,6 +18360,7 @@ var envWriteH = async (ctx, cmd, parsed) => {
   }
 };
 var _activeReporter = null;
+var _headroomEmitChain = Promise.resolve();
 var headroomConfigureH = async (ctx, cmd, parsed) => {
   const action = parsed.action;
   if (action !== "enable" && action !== "disable" && action !== "status") {
@@ -18382,7 +18428,19 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
               "Content-Type": "application/json",
               ...opts.pluginAuthToken ? { "X-Plugin-Auth-Token": opts.pluginAuthToken } : {}
             },
-            body: JSON.stringify({ agentId: opts.agent, ...delta })
+            // Body MUST match HeadroomSavingsDto + PluginAuthGuard, which read
+            // `sessionId` + `pluginId` from the body and 401 if either is
+            // missing. Mirror the self-hosted reporter in host-agent.ts exactly.
+            // Previously this sent `{ agentId, ...delta }` (no sessionId/pluginId,
+            // delta spread flat instead of nested under `savings`) → every POST
+            // was rejected 401 at the guard and silently swallowed (fetch status
+            // unchecked), so local on-demand savings never reached the backend.
+            body: JSON.stringify({
+              sessionId: ctx.sessionId,
+              pluginId: ctx.pluginId,
+              agentId: opts.agent,
+              savings: delta
+            })
           });
         }
       });
@@ -18407,14 +18465,17 @@ var headroomConfigureH = async (ctx, cmd, parsed) => {
       }
     },
     emit: (event) => {
-      if (!ctx.pluginAuthToken) return;
-      void postHeadroomEvent({
-        sessionId: ctx.sessionId,
-        pluginId: ctx.pluginId,
-        pluginAuthToken: ctx.pluginAuthToken,
-        type: event.type,
-        payload: "step" in event ? { step: event.step } : { state: event.state }
-      });
+      const token = ctx.pluginAuthToken;
+      if (!token) return;
+      _headroomEmitChain = _headroomEmitChain.then(
+        () => postHeadroomEvent({
+          sessionId: ctx.sessionId,
+          pluginId: ctx.pluginId,
+          pluginAuthToken: token,
+          type: event.type,
+          payload: "step" in event ? { step: event.step } : { state: event.state }
+        })
+      );
     }
   });
   await ctx.relay.sendResult(cmd.id, "completed", result);
@@ -27564,6 +27625,14 @@ async function start(requestedAgent) {
   process.once("exit", () => {
     headroomReporter?.stop();
   });
+  const localHeadroomReporter = session.pluginAuthToken ? maybeResumeLocalHeadroomReporter({
+    sessionId: session.id,
+    pluginId,
+    pluginAuthToken: session.pluginAuthToken
+  }) : null;
+  process.once("exit", () => {
+    localHeadroomReporter?.stop();
+  });
   if (process.env.CODESPACES === "true") ensureClaudeOnboarded();
   let beads = null;
   const getBeads = () => beads;
@@ -30342,7 +30411,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.49.3" : "0.0.0-dev";
+  const cliVersion = true ? "2.49.5" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -30541,7 +30610,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.49.3" : "unknown";
+  const v = true ? "2.49.5" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.49.3",
+  "version": "2.49.5",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",