esque-bridge 0.6.6 → 0.6.7

package/index.js

@@ -687,58 +687,98 @@ async function probeBuildError(port) {
   return scanOutputForError(preview && preview.output);
 }
 
-// Runnable previews (`expo start`, `next dev`, `vite`, …) need the project's
-// dependencies on disk. The agent scaffolds package.json but deliberately does
-// NOT run a slow `npm install` itself (the blueprint hands that to Esque) — so
-// the very first preview would otherwise die with "module 'expo' is not
-// installed" / "next: command not found". This installs them once, up front,
-// with its own generous timeout so it never collides with the 60s port-wait.
-// Idempotent: skipped as soon as node_modules exists.
-function ensureDeps() {
+// Run one `sh -c <cmd>` inside the workdir, streaming a labelled copy of its
+// output and keeping a rolling tail we can scan afterwards. Self-kills after
+// timeoutMs so a wedged install can't hang the preview forever. Resolves
+// { code, out } (code -1 on timeout/spawn error).
+function runInWorkdir(cmd, label, timeoutMs) {
   return new Promise((resolve) => {
-    let needs;
-    try {
-      needs =
-        fs.existsSync(path.join(WORKDIR, 'package.json')) &&
-        !fs.existsSync(path.join(WORKDIR, 'node_modules'));
-    } catch {
-      needs = false;
-    }
-    if (!needs) return resolve(true);
-
-    // `--legacy-peer-deps`: AI-scaffolded Expo/RN projects routinely pin a
-    // React-18 app alongside test tooling that peer-wants React 19, which makes
-    // a strict `npm install` abort with ERESOLVE. The app runtime only needs
-    // the React it pins, so we tell npm to install the tree as written rather
-    // than fail the whole preview over a test-only peer mismatch.
-    console.log('[preview] installing dependencies (npm install) — first preview, this can take a few minutes…');
-    const proc = spawn('sh', ['-c', 'npm install --legacy-peer-deps --no-audit --no-fund'], {
-      cwd: WORKDIR,
-      env: process.env,
-      stdio: ['ignore', 'pipe', 'pipe'],
-    });
-    const onData = (d) => process.stdout.write(`[npm] ${d}`);
+    const proc = spawn('sh', ['-c', cmd], { cwd: WORKDIR, env: process.env, stdio: ['ignore', 'pipe', 'pipe'] });
+    let out = '';
+    const onData = (d) => { out = (out + d).slice(-20000); process.stdout.write(`[${label}] ${d}`); };
     proc.stdout.on('data', onData);
     proc.stderr.on('data', onData);
-    const timer = setTimeout(() => {
-      console.error('[preview] npm install exceeded 6 min — moving on (preview may fail)');
-      try { proc.kill('SIGKILL'); } catch { /* already gone */ }
-      resolve(false);
-    }, 360000);
-    proc.on('exit', (code) => {
-      clearTimeout(timer);
-      if (code === 0) console.log('[preview] dependencies installed');
-      else console.error(`[preview] npm install exited ${code} — preview may fail`);
-      resolve(code === 0);
-    });
-    proc.on('error', (e) => {
-      clearTimeout(timer);
-      console.error('[preview] npm install error:', e.message);
-      resolve(false);
-    });
+    const timer = setTimeout(() => { try { proc.kill('SIGKILL'); } catch { /* already gone */ } resolve({ code: -1, out }); }, timeoutMs);
+    proc.on('exit', (code) => { clearTimeout(timer); resolve({ code, out }); });
+    proc.on('error', (e) => { clearTimeout(timer); resolve({ code: -1, out: `${out}\n${e.message}` }); });
   });
 }
 
+// The agent sometimes invents a dependency version that does not exist on the
+// registry (e.g. `react-native-worklets@0.0.0`), and a single bad pin makes the
+// whole `npm install` abort with ETARGET/E404. Pull the offending package name
+// out of npm's error text and delete it from package.json (backing the original
+// up once) so the next attempt can get past it. Returns the dropped name or null.
+function dropUnresolvableDep(npmOutput) {
+  const m =
+    npmOutput.match(/No matching version found for (@?[\w.\/-]+)@/i) ||
+    npmOutput.match(/['"]?(@?[\w.\/-]+)@[^'"\s]+['"]? is not in this registry/i);
+  if (!m) return null;
+  const name = m[1];
+  const pkgPath = path.join(WORKDIR, 'package.json');
+  try {
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    let dropped = false;
+    for (const sec of ['dependencies', 'devDependencies']) {
+      if (pkg[sec] && Object.prototype.hasOwnProperty.call(pkg[sec], name)) { delete pkg[sec][name]; dropped = true; }
+    }
+    if (!dropped) return null;
+    const bak = `${pkgPath}.esque-bak`;
+    if (!fs.existsSync(bak)) fs.copyFileSync(pkgPath, bak);
+    fs.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
+    return name;
+  } catch { return null; }
+}
+
+// Make sure the project's dependencies are on disk before a preview tries to
+// boot its dev server. The agent scaffolds package.json but deliberately leaves
+// the slow install to Esque (the blueprint says so), so the first preview would
+// otherwise die with "module 'expo' is not installed" / "next: not found".
+// Idempotent — skipped as soon as node_modules exists.
+async function ensureDeps() {
+  let isNode = false, hasModules = false, isExpo = false;
+  try {
+    const pkgPath = path.join(WORKDIR, 'package.json');
+    isNode = fs.existsSync(pkgPath);
+    hasModules = fs.existsSync(path.join(WORKDIR, 'node_modules'));
+    if (isNode) {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+      isExpo = !!(pkg.dependencies && pkg.dependencies.expo);
+    }
+  } catch { isNode = false; }
+  if (!isNode || hasModules) return true;
+
+  console.log('[preview] installing dependencies — first preview, this can take a few minutes…');
+  // `--legacy-peer-deps`: AI-scaffolded RN projects routinely pin a React-18 app
+  // beside test tooling that peer-wants React 19, which a strict install rejects.
+  const INSTALL = 'npm install --legacy-peer-deps --no-audit --no-fund';
+
+  let ok = false;
+  // Each failed pass may expose one invented version we can drop, then retry.
+  // Bounded so a genuinely unfixable project can't loop forever.
+  for (let attempt = 0; attempt < 6; attempt++) {
+    const { code, out } = await runInWorkdir(INSTALL, 'npm', 360000);
+    if (code === 0) { ok = true; break; }
+    const dropped = dropUnresolvableDep(out);
+    if (dropped) { console.log(`[preview] "${dropped}" has no installable version — removed it and retrying…`); continue; }
+    console.error(`[preview] npm install failed (exit ${code}) — preview may fail`);
+    break;
+  }
+  if (!ok) return false;
+  console.log('[preview] dependencies installed');
+
+  // For Expo apps, realign every SDK-managed package to the version the SDK
+  // expects. The agent often mixes incompatible pins (e.g. Expo 56 with
+  // react-native 0.76), which compiles to a blank/broken web bundle; this makes
+  // the tree coherent. Non-fatal — keep the installed versions if it can't run.
+  if (isExpo) {
+    const { code } = await runInWorkdir('npx --yes expo install --fix', 'expo', 240000);
+    if (code === 0) console.log('[preview] aligned dependency versions to the Expo SDK');
+    else console.warn('[preview] could not run expo install --fix — continuing with installed versions');
+  }
+  return true;
+}
+
 async function startPreview(cmd, port) {
   killPreview();
   // Make sure node_modules exists before the dev server tries to boot.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "esque-bridge",
-  "version": "0.6.6",
+  "version": "0.6.7",
   "description": "Desktop-side receiver for the Esque Agent mobile app. Pairs your phone with a local coding-agent CLI (Claude Code, Codex, Aider, or any custom command) via a tunnel + QR code, so prompts run through your subscription instead of per-token API billing.",
   "bin": {
     "esque-bridge": "index.js"