codeam-cli 2.74.0 → 2.74.2

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.74.1] — 2026-09-04
+
+### Fixed
+
+- **cli:** Npx integration servers start with npm audit off; bound mcp-warm; 25-min fleet-box step (#701)
+
+## [2.74.0] — 2026-09-03
+
+### Added
+
+- **cli:** Tool router (4 schemas instead of hundreds) + house agent's real context window (#700)
+
+### Tests
+
+- **cli:** Two of today's tests were not Windows-portable — main went red (#699)
+
 ## [2.73.10] — 2026-09-03
 
 ### Fixed

package/dist/index.js

@@ -271,8 +271,8 @@ var init_stdio_proxy = __esm({
       }
       async spawnChild(stdout, preResolved) {
         const spec = preResolved ?? await this.opts.spawnSpec();
-        const spawn47 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
-        const child = spawn47(spec.command, spec.args, {
+        const spawn48 = this.opts.spawnImpl ?? import_node_child_process33.spawn;
+        const child = spawn48(spec.command, spec.args, {
           env: { ...process.env, ...spec.env },
           // env only — never argv
           stdio: ["pipe", "pipe", "inherit"]
@@ -8136,7 +8136,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.74.0" : "0.0.0-dev",
+    cliVersion: true ? "2.74.2" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8378,7 +8378,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.74.0",
+  version: "2.74.2",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9971,7 +9971,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.74.0" ? { ideVersion: "2.74.0" } : {}
+      ..."2.74.2" ? { ideVersion: "2.74.2" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -22272,7 +22272,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.74.0" : null;
+  const current2 = true ? "2.74.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22289,7 +22289,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.74.0" : null;
+  const current2 = true ? "2.74.2" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22312,7 +22312,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.74.0" : null;
+  return true ? "2.74.2" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -24956,11 +24956,23 @@ function safeParseDetection(raw) {
   if (!raw) return null;
   const parsed = parseDetectionObject(raw);
   if (!parsed) return null;
+  if (isUnsupportedAnswer(parsed)) {
+    return {
+      framework: "unsupported",
+      notes: typeof parsed.notes === "string" ? parsed.notes : void 0
+    };
+  }
   for (const field of REQUIRED_FIELDS2) {
     if (!(field in parsed)) return null;
   }
   return parsed;
 }
+function isUnsupportedAnswer(parsed) {
+  return parsed.framework === "unsupported";
+}
+function isUnsupportedDetection(d3) {
+  return d3.framework === "unsupported";
+}
 function parseDetectionObject(raw) {
   let parsed = tryParseObject(raw.trim());
   if (!parsed) {
@@ -25044,6 +25056,7 @@ function describeDetectionFailure(raw) {
       rawExcerpt
     };
   }
+  if (isUnsupportedAnswer(parsed)) return null;
   const missing = REQUIRED_FIELDS2.filter((f) => !(f in parsed)).map(String);
   if (missing.length > 0) {
     return {
@@ -29462,7 +29475,7 @@ ${failure?.rawExcerpt ?? ""}`
       });
       return;
     }
-    if (detection.framework === "unsupported") {
+    if (isUnsupportedDetection(detection)) {
       log.info("preview", "detect: framework=unsupported");
       emitPreviewEvent({
         sessionId: ctx.sessionId,
@@ -29530,7 +29543,7 @@ function prewarmPreviewDetection(runtime) {
         log.info("preview", `prewarm: detection failed reason=${failure?.reason ?? "unknown"}`);
         return;
       }
-      if (detection.framework === "unsupported") return;
+      if (isUnsupportedDetection(detection)) return;
       await writePreviewConfig(cwd, detection);
       log.info(
         "preview",
@@ -36844,12 +36857,12 @@ function buildRelaunchProxyEnv(baseEnv) {
   return env;
 }
 var relaunchProxyWithoutBudget = async () => {
-  const { spawn: spawn47 } = await import("child_process");
+  const { spawn: spawn48 } = await import("child_process");
   killHeadroomProxy();
   await new Promise((r) => setTimeout(r, 500));
   const proxyEnv = buildRelaunchProxyEnv(process.env);
   try {
-    const proxy = spawn47(
+    const proxy = spawn48(
       "headroom",
       ["proxy", "--port", "8787"],
       { stdio: "ignore", detached: true, env: proxyEnv }
@@ -47437,7 +47450,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.74.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.74.2" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -47635,6 +47648,15 @@ async function completion(args2) {
 
 // src/integrations/mcp-run.ts
 var import_node_child_process34 = require("child_process");
+
+// src/integrations/launcher-env.ts
+var LAUNCHER_ENV = Object.freeze({
+  npm_config_audit: "false",
+  npm_config_fund: "false",
+  npm_config_update_notifier: "false"
+});
+
+// src/integrations/mcp-run.ts
 var import_node_fs14 = require("fs");
 var import_node_os14 = __toESM(require("os"));
 var import_node_path13 = __toESM(require("path"));
@@ -47764,6 +47786,14 @@ function ensureCommand(command2) {
     );
   }
 }
+function childEnvFor(delivery, token) {
+  const env = { ...LAUNCHER_ENV, ...delivery.staticEnv };
+  for (const [envVar, field] of Object.entries(delivery.envMapping)) {
+    const value = token[field];
+    if (typeof value === "string" && value) env[envVar] = value;
+  }
+  return env;
+}
 async function mcpRun(args2) {
   const id = args2[0] ?? process.env.CODEAM_MCP_INTEGRATION_ID;
   const sessionId = process.env.CODEAM_MCP_SESSION_ID;
@@ -47813,12 +47843,7 @@ async function mcpRun(args2) {
   const proxy = new RestartableStdioProxy({
     spawnSpec: async () => {
       current2 = await client3.getToken(id);
-      const env = { ...delivery.staticEnv };
-      for (const [envVar, field] of Object.entries(delivery.envMapping)) {
-        const value = current2[field];
-        if (typeof value === "string" && value) env[envVar] = value;
-      }
-      return { command: launcher, args: delivery.args, env };
+      return { command: launcher, args: delivery.args, env: childEnvFor(delivery, current2) };
     },
     shouldRestartNow: () => current2 !== null && new Date(current2.expiresAt).getTime() - Date.now() < RESTART_AHEAD_MS
   });
@@ -47865,37 +47890,72 @@ function warmCommand(target) {
   }
   return null;
 }
-async function mcpWarm(argv = []) {
-  const timeoutMs = 3e5;
+var WARM_PACKAGE_TIMEOUT_MS = 12e4;
+var WARM_TOTAL_BUDGET_MS = 10 * 6e4;
+var WARM_CONCURRENCY = 4;
+function runCapturing(command2, args2, timeoutMs) {
+  return new Promise((resolve11) => {
+    const child = (0, import_node_child_process35.spawn)(command2, args2, {
+      env: { ...process.env, ...LAUNCHER_ENV },
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+    let stderr = "";
+    child.stderr?.setEncoding("utf8");
+    child.stderr?.on("data", (c2) => stderr += c2);
+    const timer = setTimeout(() => {
+      child.kill("SIGKILL");
+      resolve11({ status: null, stderr, error: new Error(`spawn ${command2} ETIMEDOUT`) });
+    }, timeoutMs);
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      resolve11({ status: null, stderr, error });
+    });
+    child.on("close", (status2) => {
+      clearTimeout(timer);
+      resolve11({ status: status2, stderr });
+    });
+  });
+}
+async function mcpWarm(argv = [], opts = {}) {
+  const packageTimeoutMs = opts.packageTimeoutMs ?? WARM_PACKAGE_TIMEOUT_MS;
+  const totalBudgetMs = opts.totalBudgetMs ?? WARM_TOTAL_BUDGET_MS;
+  const concurrency = opts.concurrency ?? WARM_CONCURRENCY;
   const targets = warmTargets();
   const only = argv.filter((a) => !a.startsWith("-"));
   const selected = only.length > 0 ? targets.filter((t2) => only.includes(t2.id)) : targets;
   const result = { warmed: [], skipped: [], failed: [] };
   console.log(`[codeam mcp-warm] ${selected.length} MCP package(s) to pre-fetch`);
-  for (const target of selected) {
-    const cmd = warmCommand(target);
-    if (!cmd) {
-      result.skipped.push(`${target.spec} (no warm recipe for '${target.launcher}')`);
-      continue;
-    }
-    const started = Date.now();
-    const run = (0, import_node_child_process35.spawnSync)(cmd.command, cmd.args, {
-      stdio: ["ignore", "ignore", "pipe"],
-      timeout: timeoutMs,
-      encoding: "utf8"
-    });
-    const secs = ((Date.now() - started) / 1e3).toFixed(1);
-    if (run.status === 0) {
-      result.warmed.push(target.spec);
-      console.log(`  OK   ${target.spec} (${secs}s)`);
-    } else {
-      const noise = /^npm (warn|notice)\b/;
-      const lines = (run.stderr ?? "").split("\n").map((l) => l.trim()).filter((l) => l.length > 0 && !noise.test(l));
-      const reason = run.error?.message ?? lines[lines.length - 1] ?? `exit ${String(run.status)} (no stderr)`;
-      result.failed.push({ spec: target.spec, reason });
-      console.log(`  MISS ${target.spec} (${secs}s) \u2014 fetched at runtime instead: ${reason}`);
+  const deadline = Date.now() + totalBudgetMs;
+  const queue = [...selected];
+  const worker = async () => {
+    for (let target = queue.shift(); target; target = queue.shift()) {
+      const cmd = warmCommand(target);
+      if (!cmd) {
+        result.skipped.push(`${target.spec} (no warm recipe for '${target.launcher}')`);
+        continue;
+      }
+      const remaining = deadline - Date.now();
+      if (remaining <= 0) {
+        result.failed.push({ spec: target.spec, reason: "warm budget spent" });
+        console.log(`  MISS ${target.spec} (0.0s) \u2014 fetched at runtime instead: warm budget spent`);
+        continue;
+      }
+      const started = Date.now();
+      const run = await runCapturing(cmd.command, cmd.args, Math.min(packageTimeoutMs, remaining));
+      const secs = ((Date.now() - started) / 1e3).toFixed(1);
+      if (run.status === 0) {
+        result.warmed.push(target.spec);
+        console.log(`  OK   ${target.spec} (${secs}s)`);
+      } else {
+        const noise = /^npm (warn|notice)\b/;
+        const lines = run.stderr.split("\n").map((l) => l.trim()).filter((l) => l.length > 0 && !noise.test(l));
+        const reason = run.error?.message ?? lines[lines.length - 1] ?? `exit ${String(run.status)} (no stderr)`;
+        result.failed.push({ spec: target.spec, reason });
+        console.log(`  MISS ${target.spec} (${secs}s) \u2014 fetched at runtime instead: ${reason}`);
+      }
     }
-  }
+  };
+  await Promise.all(Array.from({ length: Math.max(1, concurrency) }, worker));
   console.log(
     `[codeam mcp-warm] warmed=${result.warmed.length} failed=${result.failed.length} skipped=${result.skipped.length}`
   );
@@ -47903,12 +47963,13 @@ async function mcpWarm(argv = []) {
     "mcpWarm",
     `warmed=${result.warmed.length} failed=${result.failed.length} skipped=${result.skipped.length}`
   );
+  return result;
 }
 
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.74.0" : "unknown";
+  const v = true ? "2.74.2" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 
@@ -48110,7 +48171,8 @@ async function main() {
     return mcpRun(args);
   }
   if (command === "mcp-warm") {
-    return mcpWarm(args);
+    await mcpWarm(args);
+    return;
   }
   if (command === "mcp-router") {
     return mcpRouter();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.74.0",
+  "version": "2.74.2",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",