codeam-cli 2.52.12 → 2.53.1

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.53.0] — 2026-07-06
+
+### Added
+
+- **cli:** Proactive credential validation on session start / wake
+
+## [2.52.12] — 2026-07-05
+
+### Fixed
+
+- **cli:** Supervise the Headroom proxy + report version on heartbeat
+
 ## [2.52.11] — 2026-07-04
 
 ### Fixed

package/dist/index.js

@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.52.12" : "0.0.0-dev",
+    cliVersion: true ? "2.53.1" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.52.12",
+  version: "2.53.1",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6543,7 +6543,7 @@ var CommandRelayService = class {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.52.12" ? { ideVersion: "2.52.12" } : {}
+      ..."2.53.1" ? { ideVersion: "2.53.1" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -15023,7 +15023,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.52.12" : null;
+  const current = true ? "2.53.1" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15040,7 +15040,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.52.12" : null;
+  const current = true ? "2.53.1" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15742,7 +15742,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process15.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.52.12" : null;
+  return true ? "2.53.1" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -21198,6 +21198,60 @@ async function waitForCommandOnPath(cmd, opts = {}) {
   }
   return check();
 }
+var ADAPTER_MODULE_LOAD_ERROR_RE = /ERR_MODULE_NOT_FOUND|Cannot find module|ERR_REQUIRE_ESM|ERR_UNKNOWN_BUILTIN_MODULE|SyntaxError|Unexpected (token|end|identifier)|missing \) after argument list/i;
+function probeAdapterModuleGraph(command2, args2, opts = {}) {
+  const livenessMs = opts.livenessMs ?? 400;
+  const spawnFn = opts.spawnFn ?? import_child_process24.spawn;
+  return new Promise((resolve7) => {
+    let settled = false;
+    let stderr = "";
+    let timer;
+    let child;
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      try {
+        child?.kill("SIGKILL");
+      } catch {
+      }
+      resolve7(r);
+    };
+    try {
+      child = spawnFn(command2, [...args2], { stdio: ["pipe", "ignore", "pipe"] });
+    } catch {
+      resolve7("ok");
+      return;
+    }
+    child.stderr?.on("data", (d3) => {
+      stderr += d3.toString();
+      if (stderr.length > 8192) stderr = stderr.slice(-8192);
+    });
+    child.on("error", () => finish("ok"));
+    child.on("exit", (code) => {
+      if (code !== 0 && code !== null && ADAPTER_MODULE_LOAD_ERROR_RE.test(stderr)) {
+        finish("transient");
+      } else {
+        finish("ok");
+      }
+    });
+    timer = setTimeout(() => finish("ok"), livenessMs);
+  });
+}
+async function waitForAdapterModuleGraph(command2, args2, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 18e4;
+  const pollMs = opts.pollMs ?? 500;
+  const now = opts.now ?? Date.now;
+  const sleep3 = opts.sleep ?? realSleep;
+  const probeOpts = { livenessMs: opts.livenessMs, spawnFn: opts.spawnFn };
+  const deadline = now() + timeoutMs;
+  if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
+  while (now() < deadline) {
+    await sleep3(pollMs);
+    if (await probeAdapterModuleGraph(command2, args2, probeOpts) === "ok") return true;
+  }
+  return false;
+}
 
 // src/agents/acp/adapters.ts
 var require_ = require;
@@ -25305,6 +25359,37 @@ You have two options:
   };
 }
 
+// src/agents/acp/wakeCredentialProbe.ts
+async function localCredentialExpiryStatus(agent) {
+  if (!/claude/i.test(agent)) return "unknown";
+  const token = await extractLocalClaudeToken();
+  if (!token) return "unknown";
+  return validateClaudeToken(token).status;
+}
+function createWakeCredentialProbe(deps) {
+  return {
+    run: async () => {
+      let status2;
+      try {
+        status2 = await deps.getStatus();
+      } catch {
+        return false;
+      }
+      if (status2 !== "expired") return false;
+      deps.log?.("wake credential probe \u2014 local token expired, surfacing re-auth");
+      try {
+        await deps.emitReauthBubble();
+      } catch {
+      }
+      try {
+        await deps.reportCredentialInvalid();
+      } catch {
+      }
+      return true;
+    }
+  };
+}
+
 // src/agents/acp/reconcileDelta.ts
 function reconcileCumulative(existing, incoming) {
   if (incoming.length === 0) return existing;
@@ -26971,9 +27056,9 @@ async function runAcpSession(opts) {
   });
   let _budgetReachedPosted = false;
   const relaunchProxyWithoutBudget = async () => {
-    const { spawn: spawn34 } = await import("child_process");
+    const { spawn: spawn35 } = await import("child_process");
     try {
-      const killer = spawn34("pkill", ["-TERM", "-f", "headroom.*proxy"], {
+      const killer = spawn35("pkill", ["-TERM", "-f", "headroom.*proxy"], {
         detached: true,
         stdio: "ignore"
       });
@@ -26985,7 +27070,7 @@ async function runAcpSession(opts) {
     await new Promise((r) => setTimeout(r, 500));
     const proxyEnv = buildRelaunchProxyEnv(process.env);
     try {
-      const proxy = spawn34(
+      const proxy = spawn35(
         "headroom",
         ["proxy", "--port", "8787"],
         { stdio: "ignore", detached: true, env: proxyEnv }
@@ -27141,6 +27226,17 @@ async function runAcpSession(opts) {
   );
   await onboardingWelcomeDone;
   relay.start();
+  void createWakeCredentialProbe({
+    getStatus: () => localCredentialExpiryStatus(opts.agent),
+    emitReauthBubble: async () => {
+      await publisher.publishOutput({ type: "new_turn", done: false });
+      await publisher.publishOutput({ type: "text", content: AUTH_FAILURE_MESSAGE, done: true });
+      history.appendAgentInitiatedReply(AUTH_FAILURE_MESSAGE);
+      await history.flush();
+    },
+    reportCredentialInvalid: () => reportCredentialInvalid(opts),
+    log: (msg) => showInfo(msg)
+  }).run();
   const prewarmTimer = setTimeout(() => prewarmPreviewDetection(runtime), 2e4);
   const shutdown = async (signal) => {
     showInfo(`Shutting down ACP session (${signal})\u2026`);
@@ -28746,7 +28842,13 @@ async function start(requestedAgent) {
   const depsReady = process.env.CODESPACES === "true" ? provisionProjectDependencies(cwd).catch(() => void 0) : Promise.resolve();
   if (process.env.CODESPACES === "true") {
     const GATE_TIMEOUT_MS = 24e4;
-    const agentBinaryReady = getAcpAdapter(session.agent)?.waitForBinary({ timeoutMs: GATE_TIMEOUT_MS }).catch(() => false) ?? Promise.resolve(true);
+    const acpAdapterForGate = getAcpAdapter(session.agent);
+    const agentBinaryReady = acpAdapterForGate ? Promise.all([
+      acpAdapterForGate.waitForBinary({ timeoutMs: GATE_TIMEOUT_MS }).catch(() => false),
+      waitForAdapterModuleGraph(acpAdapterForGate.command, acpAdapterForGate.args, {
+        timeoutMs: GATE_TIMEOUT_MS
+      }).catch(() => false)
+    ]) : Promise.resolve(true);
     let gateTimer;
     await Promise.race([
       Promise.all([beadsReady.catch(() => null), depsReady, agentBinaryReady]),
@@ -31507,7 +31609,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.52.12" : "0.0.0-dev";
+  const cliVersion = true ? "2.53.1" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -31706,7 +31808,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.52.12" : "unknown";
+  const v = true ? "2.53.1" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.52.12",
+  "version": "2.53.1",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",