codeam-cli 2.76.30 → 2.76.32

package/CHANGELOG.md

@@ -4,6 +4,21 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.76.30] — 2026-10-14
+
+### CI
+
+- **release:** Build the Box image only after npm serves the version
+
+### Documentation
+
+- **release:** Describe the next → canary → latest release gate in the README
+
+### Fixed
+
+- **cli:** Preview prewarm skips an empty scratch project
+- **cli:** Identify with the current plan from /reconnect, not the pair-time one
+
 ## [2.76.29] — 2026-10-13
 
 ### Fixed

package/dist/index.js

@@ -10627,7 +10627,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.30" : "0.0.0-dev",
+    cliVersion: true ? "2.76.32" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10876,7 +10876,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.30",
+  version: "2.76.32",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -11038,7 +11038,7 @@ async function requestCode(pluginId, pluginSecretHash) {
     return { ok: false, reason: "network" };
   }
 }
-async function fetchCurrentPluginAuthToken(sessionId, pluginId, pollSecret, onUserId) {
+async function fetchCurrentPluginAuthToken(sessionId, pluginId, pollSecret, onUserId, onSessionGone) {
   try {
     const result = await _transport.postJson(
       `${API_BASE}/api/pairing/reconnect`,
@@ -11070,10 +11070,21 @@ async function fetchCurrentPluginAuthToken(sessionId, pluginId, pollSecret, onUs
     }
     const token = data.pluginAuthToken;
     return typeof token === "string" && token.length > 0 ? token : null;
-  } catch {
+  } catch (err) {
+    if (onSessionGone && isSessionNotFound(err)) onSessionGone();
     return null;
   }
 }
+function isSessionNotFound(err) {
+  const e = err;
+  if (!e || e.statusCode !== 404 || typeof e.body !== "string") return false;
+  try {
+    const parsed = JSON.parse(e.body);
+    return parsed?.code === "SESSION_NOT_FOUND" || parsed?.error?.code === "SESSION_NOT_FOUND";
+  } catch {
+    return false;
+  }
+}
 var _transport = {
   postJson: _postJson,
   getJson: _getJson,
@@ -12241,7 +12252,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.30" ? { ideVersion: "2.76.30" } : {}
+      ..."2.76.32" ? { ideVersion: "2.76.32" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body, this.pollSecretHeader());
@@ -19489,7 +19500,7 @@ var CodexRuntimeStrategy = class {
   async generateOneShot(prompt, opts) {
     const binary = this.os.findInPath("codex");
     if (!binary) return null;
-    const launch = this.os.buildLaunch(binary, ["exec", prompt]);
+    const launch = this.os.buildLaunch(binary, ["exec", "--skip-git-repo-check", prompt]);
     const runOnce = () => {
       let stderr = "";
       return spawnAndCapture(launch.cmd, launch.args, {
@@ -27280,7 +27291,12 @@ async function startDevServer(ctx, extraEnv = {}) {
   emitProgress("BOOT_SEQUENCE", `${spawnable.command} ${spawnable.args.join(" ")}`);
   const devServer = (0, import_child_process20.spawn)(spawnable.command, spawnable.args, {
     cwd,
-    env: { ...process.env, ...spawnable.env ?? {}, ...extraEnv },
+    // PYTHONUNBUFFERED: Python block-buffers stdout into a pipe, so a
+    // `python3 -m http.server` (what the detector picks for a plain HTML site)
+    // never shows its "Serving HTTP on … (http://0.0.0.0:8000/)" line while it
+    // already serves — every such preview ended in a 120 s ready_timeout
+    // (codeagent-nczt.9). First, so the project's own env can still override it.
+    env: { PYTHONUNBUFFERED: "1", ...process.env, ...spawnable.env ?? {}, ...extraEnv },
     stdio: ["ignore", "pipe", "pipe"],
     // POSIX: lead a new process group so teardown can SIGTERM the whole
     // tree. Dev servers fork worker children that bind the port; killing
@@ -38906,6 +38922,26 @@ function boundStreamingChunkContent(content, max = STREAMING_CHUNK_SNAPSHOT_MAX_
     truncated: true
   };
 }
+var CHAT_TEXT_MAX_BYTES = 192 * 1024;
+var CHAT_TEXT_FALLBACK_MAX_BYTES = 32 * 1024;
+function boundChatText(content, maxBytes = CHAT_TEXT_MAX_BYTES) {
+  const bytes = Buffer.from(content, "utf8");
+  if (bytes.length <= maxBytes) return { content, truncated: false };
+  const budget = Math.max(0, maxBytes - 256);
+  const headBytes = Math.floor(budget * 0.4);
+  const tailBytes = budget - headBytes;
+  const head = bytes.subarray(0, headBytes).toString("utf8").replace(/\uFFFD+$/, "");
+  const tail = bytes.subarray(bytes.length - tailBytes).toString("utf8").replace(/^\uFFFD+/, "");
+  const omittedKb = Math.max(1, Math.round((bytes.length - headBytes - tailBytes) / 1024));
+  return {
+    content: `${head}
+
+\u2026 [${omittedKb} KB of this reply left out \u2014 too long to show in full] \u2026
+
+${tail}`,
+    truncated: true
+  };
+}
 var AcpPublisher = class {
   constructor(opts) {
     this.opts = opts;
@@ -38924,6 +38960,10 @@ var AcpPublisher = class {
    *  (2026-06-28 incident: a dead-token publisher spammed 401 ×34 while
    *  the agent's replies silently never reached the phone). */
   pairingInvalid = false;
+  /** Set when the server refused a streaming `text` frame with 413: further
+   *  partial frames of the turn would be refused too, so they are dropped
+   *  until the next `new_turn` / `clear`. The terminal frame still goes. */
+  oversizeTextTurn = false;
   authHeaders() {
     return {
       "Content-Type": "application/json",
@@ -39005,8 +39045,29 @@ var AcpPublisher = class {
    */
   async publishOutput(body) {
     const url2 = `${this.apiBase}/api/commands/output`;
-    try {
-      const { statusCode, body: resBody } = await this.postWithReauth(url2, this.envelope(body));
+    const isText = body.type === "text" && typeof body.content === "string";
+    const isFinal = body.done === true;
+    if (body.type === "new_turn" || body.type === "clear") this.oversizeTextTurn = false;
+    if (isText && !isFinal && this.oversizeTextTurn) return;
+    if (isText) {
+      const bounded = boundChatText(body.content);
+      if (bounded.truncated) body = { ...body, content: bounded.content };
+    }
+    try {
+      let { statusCode, body: resBody } = await this.postWithReauth(url2, this.envelope(body));
+      if (statusCode === 413 && isText) {
+        if (!isFinal) {
+          this.oversizeTextTurn = true;
+          log.warn("acpPublisher", "output text frame refused 413 \u2014 dropping partial frames until the turn ends");
+          return;
+        }
+        const fallback = boundChatText(body.content, CHAT_TEXT_FALLBACK_MAX_BYTES);
+        log.warn("acpPublisher", "output done:true refused 413 \u2014 retrying once with a shortened reply");
+        ({ statusCode, body: resBody } = await this.postWithReauth(
+          url2,
+          this.envelope({ ...body, content: fallback.content })
+        ));
+      }
       if (statusCode < 200 || statusCode >= 300) {
         log.warn(
           "acpPublisher",
@@ -42061,7 +42122,11 @@ function describeResult(raw) {
       return {
         // The agent once answered a failed spawn with "the preview is open, here
         // is the link" (2026-10-05). Say plainly that nothing is serving.
-        text: `Preview failed at ${String(r.stage)}: ${String(r.message)}. The preview is NOT running \u2014 do not give the user a preview link; tell them what failed.`,
+        text: `Preview failed at ${String(r.stage)}: ${String(r.message).replace(/\.+$/, "")}. The preview is NOT running \u2014 do not give the user a preview link.` + (r.output ? ` The dev server's last output:
+\`\`\`
+${String(r.output)}
+\`\`\`
+If it shows a mistake in the command (a wrong flag, a missing file), call start_preview again with the fixed command; otherwise tell the user what failed.` : " Tell the user what failed."),
         isError: true
       };
     default:
@@ -42394,6 +42459,7 @@ var MAX_AGENT_RESTARTS = 3;
 var AGENT_RESTART_WINDOW_MS = 10 * 6e4;
 var MAX_SELECTOR = 500;
 var MAX_LABEL = 80;
+var AGENT_OUTPUT_TAIL = 2e3;
 var AgentPreviewBridge = class {
   server = null;
   listening = null;
@@ -42599,9 +42665,11 @@ var AgentPreviewBridge = class {
       origin: "agent",
       onEvent: (type, payload) => {
         if (type === USER_EVENTS.PREVIEW_ERROR) {
+          const output = String(payload.stderrTail ?? "").trim().slice(-AGENT_OUTPUT_TAIL);
           failure = {
             stage: String(payload.stage ?? "spawn"),
-            message: String(payload.message ?? "The preview failed to start.")
+            message: String(payload.message ?? "The preview failed to start."),
+            ...output ? { output } : {}
           };
         }
       }
@@ -47796,6 +47864,7 @@ async function start(requestedAgent, presetSession) {
   const cwd = process.cwd();
   let reconnectUserId;
   let reconnectPlan;
+  let sessionGone = false;
   const refreshed = await fetchCurrentPluginAuthToken(
     session.id,
     pluginId,
@@ -47803,8 +47872,19 @@ async function start(requestedAgent, presetSession) {
     (userId, plan) => {
       reconnectUserId = userId;
       reconnectPlan = plan;
+    },
+    () => {
+      sessionGone = true;
     }
   );
+  if (sessionGone) {
+    showInfo("This session was deleted from the app \u2014 not resuming it.");
+    try {
+      removeSession(session.id);
+    } catch {
+    }
+    process.exit(0);
+  }
   if (refreshed && refreshed !== session.pluginAuthToken) {
     addSession({ ...session, pluginAuthToken: refreshed });
     session.pluginAuthToken = refreshed;
@@ -51421,7 +51501,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.30" : null;
+  const current2 = true ? "2.76.32" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51438,7 +51518,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.30" : null;
+  const current2 = true ? "2.76.32" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51721,7 +51801,7 @@ var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.30" : null;
+  return true ? "2.76.32" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -51932,7 +52012,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.30" : null,
+    ownVersion: true ? "2.76.32" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -54470,7 +54550,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.30" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.32" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -55006,7 +55086,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.30" : "unknown";
+  const v = true ? "2.76.32" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.76.30",
+  "version": "2.76.32",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",