codeam-cli 2.74.2 → 2.74.4

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.74.3] — 2026-09-04
+
+### Fixed
+
+- **cli:** Mcp-warm spawns its launcher through a shell on Windows (#706)
+- **cli:** Expo preview — make sure @expo/ngrok exists before `expo start --tunnel` (#707)
+
+## [2.74.2] — 2026-09-04
+
+### Fixed
+
+- **cli:** A "no dev server" detection is a verdict, not a malformed answer (#704)
+
 ## [2.74.1] — 2026-09-04
 
 ### Fixed

package/dist/index.js

@@ -8136,7 +8136,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.74.2" : "0.0.0-dev",
+    cliVersion: true ? "2.74.4" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8378,7 +8378,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.74.2",
+  version: "2.74.4",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9971,7 +9971,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.74.2" ? { ideVersion: "2.74.2" } : {}
+      ..."2.74.4" ? { ideVersion: "2.74.4" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -22272,7 +22272,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.74.2" : null;
+  const current2 = true ? "2.74.4" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22289,7 +22289,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.74.2" : null;
+  const current2 = true ? "2.74.4" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22312,7 +22312,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.74.2" : null;
+  return true ? "2.74.4" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -25520,6 +25520,25 @@ async function ensureYarnInstalled(deps) {
   if (!res.ok) return res;
   return await deps.hasYarn() ? { ok: true, code: 0 } : { ok: false, code: res.code };
 }
+function isExpoTunnelCommand(command2, args2) {
+  const flat = [import_path8.default.basename(command2), ...args2];
+  return flat.includes("expo") && flat.includes("--tunnel");
+}
+var EXPO_NGROK_SPEC = "@expo/ngrok@^4.1.0";
+async function ensureExpoTunnelDeps(deps) {
+  if (await deps.hasNgrok()) return { ok: true, code: 0, installed: false };
+  const res = await deps.installNgrok();
+  if (!res.ok) return { ...res, installed: false };
+  return await deps.hasNgrok() ? { ok: true, code: 0, installed: true } : { ok: false, code: res.code, installed: false };
+}
+function ngrokResolvesFrom(cwd) {
+  try {
+    require.resolve("@expo/ngrok/package.json", { paths: [cwd] });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function isJsInstallCommand(cmd, args2) {
   const known = ["npm", "pnpm", "yarn", "bun"];
   if (!known.includes(cmd)) return false;
@@ -26396,10 +26415,7 @@ async function runPreviewStart(args2) {
   };
   const existing = activePreviews.get(sessionId);
   if (existing && existing.devServer?.exitCode !== 0 && existing.devServer?.exitCode == null) {
-    log.info(
-      "preview",
-      `reusing running preview for session=${sessionId} url=${existing.url}`
-    );
+    log.info("preview", `reusing running preview for session=${sessionId} url=${existing.url}`);
     ctx.emitProgress("READY_DETECTED", "reusing running preview");
     emit2(USER_EVENTS.PREVIEW_READY, {
       url: existing.url,
@@ -26448,6 +26464,7 @@ async function provisionDeps(ctx) {
       pluginAuthToken: ctx.projectEnvAuth.pluginAuthToken
     });
   }
+  const needsExpoNgrok = isExpoTunnelCommand(detection.command, detection.args ?? []);
   const missingDeps = detectMissingNodeDeps(cwd);
   let preflightRan = false;
   if (missingDeps) {
@@ -26501,6 +26518,32 @@ async function provisionDeps(ctx) {
     }
     preflightRan = true;
   }
+  if (needsExpoNgrok) {
+    const ensured = await ensureExpoTunnelDeps({
+      hasNgrok: async () => ngrokResolvesFrom(cwd),
+      installNgrok: async () => {
+        emitProgress(
+          "SETUP_RUN",
+          `npm install --no-save ${EXPO_NGROK_SPEC} (Expo tunnel needs ngrok; not found)`
+        );
+        const r = await runSetupCommand(
+          "npm",
+          ["install", "--no-save", "--no-audit", "--no-fund", EXPO_NGROK_SPEC],
+          cwd,
+          detection.env,
+          { timeoutMs: INSTALL_TIMEOUT_MS2 }
+        );
+        return { ok: r.status === "ok", code: r.code };
+      }
+    });
+    if (!ensured.ok) {
+      emit2(USER_EVENTS.PREVIEW_ERROR, {
+        stage: "spawn",
+        message: `Expo's tunnel needs @expo/ngrok and installing it automatically failed (npm install --no-save ${EXPO_NGROK_SPEC}, exit ${ensured.code}). Install it in the project and try the preview again.`
+      });
+      return false;
+    }
+  }
   const normalizedSetup = (detection.setup_commands ?? []).map((entry) => {
     if (typeof entry === "string") {
       const parts = entry.trim().split(/\s+/).filter(Boolean);
@@ -26516,13 +26559,9 @@ async function provisionDeps(ctx) {
   for (const setup of agentSetupCommands) {
     emitProgress("SETUP_RUN", `${setup.cmd} ${setup.args.join(" ")}`);
     const timeoutMs = isJsInstallCommand(setup.cmd, setup.args) ? INSTALL_TIMEOUT_MS2 : SETUP_TIMEOUT_MS;
-    const result = await runSetupCommand(
-      setup.cmd,
-      setup.args,
-      cwd,
-      detection.env,
-      { timeoutMs }
-    );
+    const result = await runSetupCommand(setup.cmd, setup.args, cwd, detection.env, {
+      timeoutMs
+    });
     if (result.status === "timeout") {
       emit2(USER_EVENTS.PREVIEW_ERROR, {
         stage: "ready_timeout",
@@ -26590,10 +26629,7 @@ async function startDevServer(ctx) {
     } else {
       const verdict = await canAdoptPort(detection.port);
       if (verdict.adopt) {
-        log.info(
-          "preview",
-          `adopting the dev server already serving on port ${detection.port}`
-        );
+        log.info("preview", `adopting the dev server already serving on port ${detection.port}`);
         emitProgress("READY_DETECTED", `adopted the server already on port ${detection.port}`);
         return { devServer: null, expoUrlRef: { current: null } };
       }
@@ -26744,11 +26780,9 @@ async function establishTunnel(ctx, dev) {
         `cloudflared quick tunnel (retry ${attempt}/${MAX_TUNNEL_ATTEMPTS})`
       );
     }
-    const candidate = (0, import_child_process23.spawn)(
-      bin,
-      ["tunnel", "--url", `http://localhost:${tunnelPort}`],
-      { stdio: ["ignore", "pipe", "pipe"] }
-    );
+    const candidate = (0, import_child_process23.spawn)(bin, ["tunnel", "--url", `http://localhost:${tunnelPort}`], {
+      stdio: ["ignore", "pipe", "pipe"]
+    });
     const outcome = await awaitTunnelRegistered(
       candidate,
       null,
@@ -30959,7 +30993,27 @@ function extractText3(content) {
   }
   return "";
 }
-var CONVERSATION_BATCH_SIZE = 30;
+var CONVERSATION_BATCH_MAX_MESSAGES = 150;
+var CONVERSATION_BATCH_MAX_BYTES = 2 * 1024 * 1024;
+function batchConversation(messages, limits = {}) {
+  const maxMessages = limits.maxMessages ?? CONVERSATION_BATCH_MAX_MESSAGES;
+  const maxBytes = limits.maxBytes ?? CONVERSATION_BATCH_MAX_BYTES;
+  const out2 = [];
+  let cur = [];
+  let curBytes = 0;
+  for (const m of messages) {
+    const size = Buffer.byteLength(JSON.stringify(m));
+    if (cur.length > 0 && (cur.length >= maxMessages || curBytes + size > maxBytes)) {
+      out2.push(cur);
+      cur = [];
+      curBytes = 0;
+    }
+    cur.push(m);
+    curBytes += size;
+  }
+  if (cur.length > 0) out2.push(cur);
+  return out2;
+}
 function scrubSquadContext(messages) {
   const out2 = [];
   for (const m of messages) {
@@ -31018,7 +31072,7 @@ function parseJsonl(filePath) {
   }
   return messages;
 }
-function post(endpoint, body, pluginAuthToken) {
+function postWithStatus(endpoint, body, pluginAuthToken) {
   return new Promise((resolve11) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE8}${endpoint}`);
@@ -31042,24 +31096,33 @@ function post(endpoint, body, pluginAuthToken) {
       },
       (res) => {
         res.resume();
-        const ok = res.statusCode !== void 0 && res.statusCode >= 200 && res.statusCode < 300;
-        if (!ok) log.warn("history:post", `${endpoint} \u2192 HTTP ${res.statusCode}`);
-        resolve11(ok);
+        const status2 = res.statusCode ?? null;
+        const ok = status2 !== null && status2 >= 200 && status2 < 300;
+        if (!ok) log.warn("history:post", `${endpoint} \u2192 HTTP ${status2}`);
+        let retryAfterMs = null;
+        if (status2 === 429) {
+          const ra = Number(res.headers["retry-after"]);
+          retryAfterMs = Number.isFinite(ra) && ra > 0 ? ra * 1e3 : 2e4;
+        }
+        resolve11({ ok, status: status2, retryAfterMs });
       }
     );
     req.on("error", (err) => {
       log.warn("history:post", `${endpoint} network error`, err);
-      resolve11(false);
+      resolve11({ ok: false, status: null, retryAfterMs: null });
     });
     req.on("timeout", () => {
       log.warn("history:post", `${endpoint} timeout after 15s`);
       req.destroy();
-      resolve11(false);
+      resolve11({ ok: false, status: null, retryAfterMs: null });
     });
     req.write(payload);
     req.end();
   });
 }
+function post(endpoint, body, pluginAuthToken) {
+  return postWithStatus(endpoint, body, pluginAuthToken).then((r) => r.ok);
+}
 var HistoryService = class _HistoryService {
   constructor(runtime, pluginId, cwd, options) {
     this.pluginId = pluginId;
@@ -31419,33 +31482,45 @@ var HistoryService = class _HistoryService {
     }
     return parseJsonl(path74.join(this.projectDir, `${sessionId}.jsonl`));
   }
+  /** One in-flight full upload per conversation — the baton mirror and a
+   *  `get_conversation` used to upload the same transcript concurrently. */
+  uploadsInFlight = /* @__PURE__ */ new Map();
   async loadConversation(sessionId) {
+    const inFlight = this.uploadsInFlight.get(sessionId);
+    if (inFlight) return inFlight;
+    const run = this.loadConversationNow(sessionId).finally(() => {
+      this.uploadsInFlight.delete(sessionId);
+    });
+    this.uploadsInFlight.set(sessionId, run);
+    return run;
+  }
+  async loadConversationNow(sessionId) {
     const messages = this.readConversation(sessionId);
     if (messages.length === 0) return;
-    const totalBatches = Math.ceil(messages.length / CONVERSATION_BATCH_SIZE);
+    const batches = batchConversation(messages);
     const RETRY_DELAYS = [500, 1e3, 2e3, 4e3, 8e3];
-    for (let i = 0; i < totalBatches; i++) {
-      const batch = messages.slice(i * CONVERSATION_BATCH_SIZE, (i + 1) * CONVERSATION_BATCH_SIZE);
+    for (let i = 0; i < batches.length; i++) {
       const body = {
         pluginId: this.pluginId,
-        // `agentId` keys the backend's per-agent conversation cache.
-        // Older backends that don't recognise the field silently
-        // ignore it and default to `claude-code` server-side — same
-        // outcome as before the per-agent split.
         agentId: this.runtime.id,
         sessionId,
-        messages: batch,
+        messages: batches[i],
         batchIndex: i,
-        totalBatches
+        totalBatches: batches.length
       };
-      let ok = await post("/api/sessions/conversation", body, this.pluginAuthToken);
-      for (let attempt = 0; !ok && attempt < RETRY_DELAYS.length; attempt++) {
-        await new Promise((r) => setTimeout(r, RETRY_DELAYS[attempt]));
-        ok = await post("/api/sessions/conversation", body, this.pluginAuthToken);
-      }
-      if (!ok) {
+      let res = await postWithStatus("/api/sessions/conversation", body, this.pluginAuthToken);
+      let attempt = 0;
+      let throttled = 0;
+      while (!res.ok && (res.retryAfterMs !== null ? throttled < 6 : attempt < RETRY_DELAYS.length)) {
+        const delay = res.retryAfterMs ?? RETRY_DELAYS[attempt];
+        if (res.retryAfterMs !== null) throttled++;
+        else attempt++;
+        await new Promise((r) => setTimeout(r, delay));
+        res = await postWithStatus("/api/sessions/conversation", body, this.pluginAuthToken);
+      }
+      if (!res.ok) {
         throw new Error(
-          `Failed to upload conversation batch ${i + 1}/${totalBatches} after all retries`
+          `Failed to upload conversation batch ${i + 1}/${batches.length} after all retries (last HTTP ${res.status})`
         );
       }
     }
@@ -47450,7 +47525,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.74.2" : "0.0.0-dev";
+  const cliVersion = true ? "2.74.4" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -47897,7 +47972,12 @@ function runCapturing(command2, args2, timeoutMs) {
   return new Promise((resolve11) => {
     const child = (0, import_node_child_process35.spawn)(command2, args2, {
       env: { ...process.env, ...LAUNCHER_ENV },
-      stdio: ["ignore", "ignore", "pipe"]
+      stdio: ["ignore", "ignore", "pipe"],
+      // `npx`/`uv` are `.cmd` shims on Windows; Node ≥ 20.12 refuses to spawn a
+      // `.cmd` without a shell and a bare `npx` is ENOENT — the same reason the
+      // licence audit test needed it. The launchers here are ours, never user
+      // input, so the shell is safe.
+      shell: process.platform === "win32"
     });
     let stderr = "";
     child.stderr?.setEncoding("utf8");
@@ -47969,7 +48049,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.74.2" : "unknown";
+  const v = true ? "2.74.4" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.74.2",
+  "version": "2.74.4",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",