esque-bridge 0.6.4 → 0.6.6

package/index.js

@@ -476,6 +476,24 @@ app.use((req, res, next) => {
   next();
 });
 
+// Directory identity the app binds a project to. Lets the phone detect when a
+// project is being re-pointed at a DIFFERENT folder, or scaffolded fresh onto
+// a folder that already has files — the two silent-mismatch foot-guns.
+function workdirInfo() {
+  let empty = false;
+  let git = false;
+  let entries = -1;
+  try {
+    const all = fs.readdirSync(WORKDIR).filter((f) => f !== '.DS_Store');
+    entries = all.length;
+    empty = entries === 0;
+    git = all.includes('.git');
+  } catch {
+    /* unreadable dir — report unknown via -1 */
+  }
+  return { workdir: WORKDIR, workdirName: path.basename(WORKDIR), empty, git, entries };
+}
+
 // Public health probe.
 app.get('/', (_req, res) => {
   res.json({
@@ -483,8 +501,8 @@ app.get('/', (_req, res) => {
     service: 'esque-bridge',
     agent: AGENT_TYPE,
     agentLabel: adapter.label,
-    workdir: WORKDIR,
     sessions: Object.keys(sessionMap[AGENT_TYPE] ?? {}).length,
+    ...workdirInfo(),
   });
 });
 
@@ -492,12 +510,13 @@ app.get('/', (_req, res) => {
 // the phone includes the pair secret we validate it and report back via
 // `paired` so the app can verify the secret BEFORE showing a green
 // "Paired" state. `paired` is true (match), false (wrong/stale secret), or
-// null (no secret sent — older app builds; we can't say either way).
+// null (no secret sent — older app builds; we can't say either way). We also
+// return workdir identity so the app can warn on a folder mismatch.
 app.post('/', (req, res, next) => {
   if (req.body && req.body._probe === true) {
     const provided = req.header('x-esque-pair') || req.body?.pairSecret;
     const paired = provided == null ? null : provided === PAIRING_SECRET;
-    return res.json({ ok: true, service: 'esque-bridge', agent: AGENT_TYPE, paired });
+    return res.json({ ok: true, service: 'esque-bridge', agent: AGENT_TYPE, paired, ...workdirInfo() });
   }
   return next();
 });
@@ -668,8 +687,62 @@ async function probeBuildError(port) {
   return scanOutputForError(preview && preview.output);
 }
 
+// Runnable previews (`expo start`, `next dev`, `vite`, …) need the project's
+// dependencies on disk. The agent scaffolds package.json but deliberately does
+// NOT run a slow `npm install` itself (the blueprint hands that to Esque) — so
+// the very first preview would otherwise die with "module 'expo' is not
+// installed" / "next: command not found". This installs them once, up front,
+// with its own generous timeout so it never collides with the 60s port-wait.
+// Idempotent: skipped as soon as node_modules exists.
+function ensureDeps() {
+  return new Promise((resolve) => {
+    let needs;
+    try {
+      needs =
+        fs.existsSync(path.join(WORKDIR, 'package.json')) &&
+        !fs.existsSync(path.join(WORKDIR, 'node_modules'));
+    } catch {
+      needs = false;
+    }
+    if (!needs) return resolve(true);
+
+    // `--legacy-peer-deps`: AI-scaffolded Expo/RN projects routinely pin a
+    // React-18 app alongside test tooling that peer-wants React 19, which makes
+    // a strict `npm install` abort with ERESOLVE. The app runtime only needs
+    // the React it pins, so we tell npm to install the tree as written rather
+    // than fail the whole preview over a test-only peer mismatch.
+    console.log('[preview] installing dependencies (npm install) — first preview, this can take a few minutes…');
+    const proc = spawn('sh', ['-c', 'npm install --legacy-peer-deps --no-audit --no-fund'], {
+      cwd: WORKDIR,
+      env: process.env,
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    const onData = (d) => process.stdout.write(`[npm] ${d}`);
+    proc.stdout.on('data', onData);
+    proc.stderr.on('data', onData);
+    const timer = setTimeout(() => {
+      console.error('[preview] npm install exceeded 6 min — moving on (preview may fail)');
+      try { proc.kill('SIGKILL'); } catch { /* already gone */ }
+      resolve(false);
+    }, 360000);
+    proc.on('exit', (code) => {
+      clearTimeout(timer);
+      if (code === 0) console.log('[preview] dependencies installed');
+      else console.error(`[preview] npm install exited ${code} — preview may fail`);
+      resolve(code === 0);
+    });
+    proc.on('error', (e) => {
+      clearTimeout(timer);
+      console.error('[preview] npm install error:', e.message);
+      resolve(false);
+    });
+  });
+}
+
 async function startPreview(cmd, port) {
   killPreview();
+  // Make sure node_modules exists before the dev server tries to boot.
+  await ensureDeps();
   console.log(`[preview] starting: ${cmd}  (port ${port})`);
   const proc = spawn('sh', ['-c', cmd], { cwd: WORKDIR, env: process.env, stdio: ['ignore', 'pipe', 'pipe'] });
   preview = { port, proc, kind: null, url: null, tunnel: null, tunnelProc: null, output: '', buildError: null };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "esque-bridge",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "Desktop-side receiver for the Esque Agent mobile app. Pairs your phone with a local coding-agent CLI (Claude Code, Codex, Aider, or any custom command) via a tunnel + QR code, so prompts run through your subscription instead of per-token API billing.",
   "bin": {
     "esque-bridge": "index.js"