codeam-cli 2.71.1 → 2.72.0

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.71.1] — 2026-08-30
+
+### Added
+
+- **cli:** Reportar en qué fase va cada turno — la mitad del embudo que el servidor no ve (#670)
+
+### Tests
+
+- **cli:** Dar plazo realista a los dos tests que conducen start() de verdad (#669)
+
 ## [2.71.0] — 2026-08-29
 
 ### Added

package/dist/index.js

@@ -2909,6 +2909,17 @@ var USER_EVENTS = {
   SELF_HOSTED_HOST_STATUS: "self_hosted_host_status",
   SELF_HOSTED_HOST_REMOVED: "self_hosted_host_removed",
   SELF_HOSTED_HOST_TELEMETRY: "self_hosted_host_telemetry",
+  /**
+   * Una orden que NINGUN CLI recogio y que expiro de la cola.
+   *
+   * La cola `commands:<pluginId>` caduca a los 600 s y Redis no avisa a nadie:
+   * la tarea deja de existir en silencio. Medido el 2026-08-30 en un usuario
+   * real, SIETE de sus 17 `start_task` acabaron asi — no recibio nada y no
+   * habia forma de saber que se habian descartado. Lo publica el barrido
+   * `command-expiry-sweep` del backend; nadie puede notificar su propio
+   * silencio.
+   */
+  COMMAND_EXPIRED: "command_expired",
   SELF_HOSTED_HOST_METRICS: "self_hosted_host_metrics",
   SELF_HOSTED_HOST_SESSIONS: "self_hosted_host_sessions",
   SELF_HOSTED_DEPLOY_PROGRESS: "self_hosted_deploy_progress",
@@ -8081,7 +8092,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.71.1" : "0.0.0-dev",
+    cliVersion: true ? "2.72.0" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8323,7 +8334,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.71.1",
+  version: "2.72.0",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9489,9 +9500,14 @@ var CommandRelayService = class _CommandRelayService {
   // evicted (a command that old is long gone from the server queue anyway).
   processedIds = /* @__PURE__ */ new Set();
   static PROCESSED_ID_CAP = 1e3;
+  /** After the first, re-warn every Nth consecutive ack failure — loud enough
+   *  to notice, quiet enough not to drown the log during a network outage. */
+  static ACK_WARN_EVERY = 20;
   /** Polling backoff state (only used on the fallback). */
   pollTimer = null;
   pollFailures = 0;
+  /** Consecutive ack POST failures — drives the visibility escalation below. */
+  ackFailures = 0;
   // Successive polls that returned no commands. Drives an idle
   // backoff so a CLI sitting on the polling fallback (SSE was
   // unavailable) doesn't keep hammering the API every 2 s when
@@ -9856,13 +9872,49 @@ var CommandRelayService = class _CommandRelayService {
     }
   }
   /** Confirm receipt of command ids so the backend removes them from the queue
-   *  (the at-least-once delivery guarantee). Best-effort — never throws. */
+   *  (the at-least-once delivery guarantee). Best-effort — never throws.
+   *
+   * ⚠️ A ONE-OFF failure here is harmless (the command redelivers and we dedupe),
+   * but a PERSISTENT one is not: the queue never drains, so every batch is
+   * redelivered forever and the host looks perfectly healthy from outside —
+   * heartbeats land, commands still arrive, `status` stays `online`. That is
+   * exactly how the fleet host ran from 2026-07-15 to 2026-08-31 with NO poll
+   * secret enrolled, 401-ing every single ack, with nobody the wiser: the
+   * failure lived in `log.trace`, below the level anyone reads.
+   *
+   * So: keep it best-effort, but make a SUSTAINED failure impossible to miss,
+   * and name `PLUGIN_SECRET_REQUIRED` explicitly — it is not a network blip,
+   * it is a host that must be re-enrolled and will never recover on its own.
+   */
   ackCommands(ids) {
     const commandIds = ids.filter((id) => typeof id === "string" && id.length > 0);
     if (commandIds.length === 0) return;
     void _postJson(`${API_BASE2}/api/commands/ack`, { pluginId: this.pluginId, commandIds }, {
       ...this.pollSecretHeader()
-    }).catch((err) => log.trace("relay", "ack post failed (will redeliver+dedupe)", err));
+    }).then(() => {
+      if (this.ackFailures > 0) {
+        log.warn("relay", `ack recovered after ${this.ackFailures} consecutive failure(s)`);
+        this.ackFailures = 0;
+      }
+    }).catch((err) => {
+      this.ackFailures += 1;
+      const reason = err instanceof Error ? err.message : String(err);
+      if (/PLUGIN_SECRET_REQUIRED|INVALID_PLUGIN_SECRET/.test(reason)) {
+        log.warn(
+          "relay",
+          `ack REJECTED (${reason}) \u2014 this host must be re-paired; retrying will never fix it. Delivery still works while this client drains on receive, but the ack rail is dead and ack-mode would stall here.`
+        );
+        return;
+      }
+      if (this.ackFailures === 1 || this.ackFailures % _CommandRelayService.ACK_WARN_EVERY === 0) {
+        log.warn(
+          "relay",
+          `ack failed ${this.ackFailures}x in a row \u2014 the backend queue is not draining: ${reason}`
+        );
+        return;
+      }
+      log.trace("relay", "ack post failed (will redeliver+dedupe)", err);
+    });
   }
   // ─── Heartbeat + agents ──────────────────────────────────────────
   async sendHeartbeat(online) {
@@ -9875,7 +9927,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.71.1" ? { ideVersion: "2.71.1" } : {}
+      ..."2.72.0" ? { ideVersion: "2.72.0" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -11475,6 +11527,13 @@ var startCommandSchema = import_zod.z.object({
       value: import_zod.z.string().max(32768)
     })
   ).max(512).optional(),
+  // `env_parse` — how a pasted `.env` blob meets the project's current one.
+  // `merge` (the default when absent) keeps variables the paste does not
+  // mention, because a PARTIAL paste is the common case: people copy the block
+  // they care about, not the whole file. `replace` is opt-in and destructive
+  // in intent, so it must be asked for explicitly. The blob itself rides the
+  // existing `content` field.
+  mode: import_zod.z.enum(["merge", "replace"]).optional(),
   // `skills_configure` — the curated `SkillId` to add/remove. `list` (and a
   // malformed/unknown id on add/remove) sends no `skillId` or an invalid one;
   // `configureSkill` itself validates against the shared registry.
@@ -22134,7 +22193,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.71.1" : null;
+  const current2 = true ? "2.72.0" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22151,7 +22210,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.71.1" : null;
+  const current2 = true ? "2.72.0" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22174,7 +22233,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.71.1" : null;
+  return true ? "2.72.0" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -24725,6 +24784,14 @@ var REQUIRED_FIELDS2 = [
 ];
 function safeParseDetection(raw) {
   if (!raw) return null;
+  const parsed = parseDetectionObject(raw);
+  if (!parsed) return null;
+  for (const field of REQUIRED_FIELDS2) {
+    if (!(field in parsed)) return null;
+  }
+  return parsed;
+}
+function parseDetectionObject(raw) {
   let parsed = tryParseObject(raw.trim());
   if (!parsed) {
     const stripped = raw.replace(/^```(?:json)?\s*/m, "").replace(/\s*```\s*$/m, "").trim();
@@ -24736,12 +24803,7 @@ function safeParseDetection(raw) {
     const candidate = extractFirstJsonObject(raw);
     if (candidate) parsed = tryParseObject(candidate);
   }
-  if (!parsed) return null;
-  const obj = parsed;
-  for (const field of REQUIRED_FIELDS2) {
-    if (!(field in obj)) return null;
-  }
-  return obj;
+  return parsed ?? null;
 }
 function tryParseObject(s) {
   try {
@@ -24793,6 +24855,38 @@ function parseExpoUrl(stdout) {
   const match = stdout.match(EXPO_URL_RE);
   return match ? match[0] : null;
 }
+var RAW_EXCERPT_LIMIT = 1e3;
+function describeDetectionFailure(raw) {
+  const text = raw?.trim() ?? "";
+  const rawExcerpt = text.slice(0, RAW_EXCERPT_LIMIT);
+  if (!text) {
+    return {
+      reason: "no_output",
+      message: "The agent didn't return anything for this project. Try again, or add a .codeam/preview.json override.",
+      rawExcerpt
+    };
+  }
+  const parsed = parseDetectionObject(text);
+  if (!parsed) {
+    return {
+      reason: "no_json",
+      message: "The agent replied without a JSON block. Try again, or add a .codeam/preview.json override.",
+      rawExcerpt
+    };
+  }
+  const missing = REQUIRED_FIELDS2.filter((f) => !(f in parsed)).map(String);
+  if (missing.length > 0) {
+    return {
+      reason: "missing_fields",
+      // Decir CUALES: es lo unico con lo que alguien puede escribir el
+      // override a mano y desbloquearse sin esperar a nadie.
+      message: `The agent's answer is missing ${missing.join(", ")}. Try again, or add a .codeam/preview.json override.`,
+      missing,
+      rawExcerpt
+    };
+  }
+  return null;
+}
 
 // src/services/preview/port-ready.ts
 var net2 = __toESM(require("net"));
@@ -28126,6 +28220,44 @@ var envReadH = async (ctx, cmd) => {
     await ctx.relay.sendResult(cmd.id, "failed", { error: err.message });
   }
 };
+var envParseH = async (ctx, cmd, parsed) => {
+  const content = typeof parsed.content === "string" ? parsed.content : null;
+  if (content === null) {
+    await ctx.relay.sendResult(cmd.id, "failed", { error: "Missing content" });
+    return;
+  }
+  const replace = parsed.mode === "replace";
+  const incoming = /* @__PURE__ */ new Map();
+  for (const v of parseDotenv(content)) incoming.set(v.key, v.value);
+  const distinctAssignments = new Set(
+    content.split(/\r?\n/).map((l) => l.trim()).filter((l) => l !== "" && !l.startsWith("#") && l.includes("=")).map((l) => l.startsWith("export ") ? l.slice("export ".length).trim() : l).map((l) => l.slice(0, l.indexOf("=")).trim())
+  );
+  const unrecognized = Math.max(0, distinctAssignments.size - incoming.size);
+  const existing = /* @__PURE__ */ new Map();
+  if (!replace) {
+    try {
+      const raw = await fs65.promises.readFile(path71.join(process.cwd(), ".env"), "utf8");
+      for (const v of parseDotenv(raw)) existing.set(v.key, v.value);
+    } catch {
+    }
+  }
+  let added = 0;
+  let updated = 0;
+  for (const [key, value] of incoming) {
+    if (existing.has(key)) {
+      if (existing.get(key) !== value) updated += 1;
+    } else {
+      added += 1;
+    }
+    existing.set(key, value);
+  }
+  await ctx.relay.sendResult(cmd.id, "completed", {
+    vars: [...existing].map(([key, value]) => ({ key, value })),
+    added,
+    updated,
+    unrecognized
+  });
+};
 var envWriteH = async (ctx, cmd, parsed) => {
   const vars = parsed.vars;
   if (!Array.isArray(vars)) {
@@ -29139,7 +29271,13 @@ var requestPreviewDetectH = (ctx) => {
     const tookMs = Date.now() - startedAt;
     const detection = safeParseDetection(raw);
     if (!detection) {
-      log.info("preview", `detect: invalid agent output after ${tookMs}ms`);
+      const failure = describeDetectionFailure(raw);
+      log.info(
+        "preview",
+        `detect: failed after ${tookMs}ms reason=${failure?.reason ?? "unknown"}` + (failure?.missing ? ` missing=${failure.missing.join(",")}` : "") + `
+--- salida cruda del agente (acotada) ---
+${failure?.rawExcerpt ?? ""}`
+      );
       emitPreviewEvent({
         sessionId: ctx.sessionId,
         pluginId: ctx.pluginId,
@@ -29147,7 +29285,9 @@ var requestPreviewDetectH = (ctx) => {
         type: USER_EVENTS.PREVIEW_ERROR,
         payload: {
           stage: "detection",
-          message: "Agent returned invalid JSON. Try again, or add a .codeam/preview.json override."
+          // El mensaje sale del diagnostico: decir "JSON invalido" cuando el
+          // agente no contesto manda al usuario a mirar un JSON que no existe.
+          message: failure?.message ?? "Agent returned invalid JSON. Try again, or add a .codeam/preview.json override."
         }
       });
       return;
@@ -29215,7 +29355,12 @@ function prewarmPreviewDetection(runtime) {
       if (await readPreviewConfig(cwd)) return;
       const raw = await runtime.generateOneShot(PREVIEW_DETECT_PROMPT).catch(() => null);
       const detection = safeParseDetection(raw);
-      if (!detection || detection.framework === "unsupported") return;
+      if (!detection) {
+        const failure = describeDetectionFailure(raw);
+        log.info("preview", `prewarm: detection failed reason=${failure?.reason ?? "unknown"}`);
+        return;
+      }
+      if (detection.framework === "unsupported") return;
       await writePreviewConfig(cwd, detection);
       log.info(
         "preview",
@@ -29390,6 +29535,7 @@ var handlers = {
   save_preview_config: savePreviewConfigH,
   env_read: envReadH,
   env_write: envWriteH,
+  env_parse: envParseH,
   skills_configure: skillsConfigureH,
   take_control: takeControlH,
   handback: handbackH,
@@ -46759,7 +46905,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.71.1" : "0.0.0-dev";
+  const cliVersion = true ? "2.72.0" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -47150,7 +47296,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.71.1" : "unknown";
+  const v = true ? "2.72.0" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.71.1",
+  "version": "2.72.0",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",