codeam-cli 2.19.0 → 2.20.1

package/CHANGELOG.md

@@ -4,6 +4,91 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.20.0] — 2026-05-24
+
+### Added
+
+- **shared:** CODEAM_TEST_MODE env var to route clients at dev preview (#176)
+
+## [2.19.0] — 2026-05-24
+
+### Added
+
+- **both-plugins:** PostHog telemetry, mirrors the CLI (closes #95) (#142)
+- **both-plugins:** Bundle Hanken Grotesk + JetBrains Mono fonts (closes #96) (#147)
+- **vsc-plugin:** Add Copy Install Command CTA to empty agents state (closes #116) (#166)
+- **vsc-plugin:** 3-state status bar with rich Markdown tooltip (closes #115) (#167)
+- **both-plugins:** All-detector agent discovery; enable cursor/coderabbit/aider (closes #102 follow-up) (#171)
+- **both-plugins:** A11y pass — ARIA, focus rings, mnemonics, focus order (closes #106) (#172)
+- **both-plugins:** FooterStatusStrip — at-a-glance connection summary (closes #114) (#174)
+- **vsc-plugin:** Brand polish — GlassCard + cyberpunk h3 voice (closes #79) (#175)
+
+### CI
+
+- Drop node 18 + skip Vitest on Windows + advisory backend probes (#128)
+
+### Changed
+
+- **vsc-plugin:** Split controller-panel.ts (partial #89) (#143)
+- **jetbrains-plugin:** Extract RemoteCommandRouter (partial #89) (#144)
+- **jetbrains-plugin:** Split AgentOutputMonitor — publisher + text utils (partial #89) (#145)
+- **both-plugins:** Remove dead WebSocketService + AgentBridgeService (closes #90) (#149)
+- **jetbrains-plugin:** Extract RoundedPanel + DeviceConnectionPanel (further #89) (#151)
+- **jetbrains-plugin:** Split TerminalAgentService — publisher + reader (further #89) (#152)
+- **jetbrains-plugin:** Extract Swing-walk helpers from AgentOutputMonitor (further #89) (#153)
+- **jetbrains-plugin:** Extract Cascade JS + Codeium process tap (further #89) (#154)
+- **jetbrains-plugin:** Extract AIAssistant text-extraction helpers (further #89) (#155)
+- **jetbrains-plugin:** Extract JcefCaptureState from AgentOutputMonitor (closes #89 follow-up) (#156)
+- **jetbrains-plugin:** Split ControllerPanel HTTP + QR + row factory (closes #89 follow-up) (#157)
+- **shared:** Centralize PROTOCOL_VERSION + lifecycle constants (closes #97) (#164)
+- **both-plugins:** Lock notification voice to canonical CodeAgent Mobile copy (closes #105) (#165)
+- **vsc-plugin:** Deprecate Claude PTY-directo + Claude handlers (closes #102) (#169)
+- **jetbrains-plugin:** Deprecate Claude PTY-directo + handlers (closes #102) (#170)
+
+### Chore
+
+- **jetbrains-plugin:** Delete dead RobotPasteStrategy (partial #90) (#139)
+- **workflow:** Delete release-single.yml — drift surface (closes #110) (#158)
+- **both-plugins:** Wire logger.trace into every empty catch (closes #111) (#173)
+
+### Fixed
+
+- **ci:** Smoke test reads stderr too — banners moved off stdout in v2.18.x
+- **vsc-plugin:** Add webview CSP + render QR locally (closes #70) (#117)
+- **both-plugins:** Store pluginAuthToken in SecretStorage / PasswordSafe (closes #71) (#118)
+- **vsc-plugin:** Authenticate the observer-bridge on 127.0.0.1:47832 (closes #72) (#119)
+- **vsc-plugin:** Realpath candidate + workspace before sandbox check (closes #73) (#120)
+- **vsc-plugin:** Gate workbench-injection cleanup behind a one-shot flag (closes #74) (#121)
+- **jetbrains-plugin:** Drop untilBuild cap + re-enable plugin-structure warnings (closes #76) (#122)
+- **jetbrains-plugin:** Adopt CodeAgent Mobile brand palette + drop stale strings (closes #80) (#123)
+- **jetbrains-plugin:** Lift resume_session 500ms sleeps off EDT + WS reader (partial #75) (#124)
+- **jetbrains-plugin:** Surface action group under Tools menu (closes #77) (#125)
+- **both-plugins:** 401 recovery — clear token, stop transports, surface re-pair UX (closes #78) (#126)
+- **vsc-plugin:** Adopt CodeAgent brand palette in webview (partial #79) (#127)
+- **cli:** Make tests + parser cross-platform; restore Windows in CI (#129)
+- **both-plugins:** Align clearRemoteOutput on CLI wire shape (closes #83) (#130)
+- **both-plugins:** Honor heartbeatIntervalMs setting in CommandRelayService (closes #84) (#131)
+- **both-plugins:** Cap base64 attachments at 10 MB (closes #92) (#132)
+- **both-plugins:** Refuse to overwrite malformed MCP config (closes #93) (#133)
+- **vsc-plugin:** Exclude .pdb + tests from .vsix (closes #86) (#134)
+- **both-plugins:** De-dup commands by id on SSE reconnect (closes #85) (#135)
+- **both-plugins:** Surface a 3-state Connected/Reconnecting/Offline dot (closes #94) (#136)
+- **both-plugins:** Align strategy contract — same fields + StrategyResult (closes #82) (#137)
+- **vsc-plugin:** Defer eager activation work to first pair (closes #87) (#138)
+- **both-plugins:** Align command-handler surface (closes #81) (#140)
+- **vsc-plugin:** Drop Python PTY helper, route Claude through node-pty (closes #88) (#146)
+- **jetbrains-plugin:** Lift remaining EDT-blocking sites in dispatch (closes #75) (#150)
+- **jetbrains-plugin:** Multi-IDE verifier matrix + dynamic-plugin marker (closes #100, #108) (#159)
+- **jetbrains-plugin:** Track all known projects in IdeIntegrationService (closes #99) (#160)
+- **vsc-plugin:** Per-window port + per-workspace pluginId (closes #103) (#161)
+- **vsc-plugin:** Cache SettingsService config + react to mid-session changes (closes #107) (#162)
+- **vsc-plugin:** Drop \`as unknown as Record<string, unknown>\` casts (closes #104) (#163)
+
+### Tests
+
+- **vsc-plugin:** Cover webview-security helpers + extract sanitizeSessionId (partial #91) (#141)
+- **vsc-plugin:** Cover CommandRelayService dispatch + dedup + state (closes #91) (#148)
+
 ## [2.18.2] — 2026-05-24
 
 ### Fixed

package/dist/index.js

@@ -316,6 +316,15 @@ function isKnownAgentId(id) {
 
 // ../../packages/shared/src/api-url.ts
 var DEFAULT_API_BASE_URL = "https://api.codeagent-mobile.com";
+var DEV_API_BASE_URL = "https://dev-api.codeagent-mobile.com";
+function resolveApiBaseUrl() {
+  const env = globalThis.process?.env;
+  const explicit = env?.CODEAM_API_URL?.trim();
+  if (explicit) return explicit;
+  const testFlag = env?.CODEAM_TEST_MODE?.trim();
+  if (testFlag === "1" || testFlag?.toLowerCase() === "true") return DEV_API_BASE_URL;
+  return DEFAULT_API_BASE_URL;
+}
 
 // src/config.ts
 var fs = __toESM(require("fs"));
@@ -432,7 +441,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.19.0",
+  version: "2.20.1",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -619,7 +628,7 @@ function computePollDelay({ baseMs, failures }) {
 }
 
 // src/services/pairing.service.ts
-var API_BASE = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE = resolveApiBaseUrl();
 async function requestCode(pluginId) {
   try {
     const runtime = process.env.CODESPACES === "true" ? "github-codespaces" : "local";
@@ -5731,7 +5740,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.19.0" : "0.0.0-dev",
+    cliVersion: true ? "2.20.1" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5822,7 +5831,7 @@ function maybePrintFirstRunBanner() {
 }
 
 // src/services/command-relay.service.ts
-var API_BASE2 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE2 = resolveApiBaseUrl();
 var CommandRelayService = class {
   constructor(pluginId, onCommand, agentMeta) {
     this.pluginId = pluginId;
@@ -9522,6 +9531,9 @@ var ClaudeRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectSelector(lines) ?? detectListSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /^\?\s.*shortcut/i.test(l.trim()));
+  }
   credentialLocator() {
     return claudeCredentialLocator();
   }
@@ -10402,6 +10414,9 @@ var CodexRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectCodexSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /[│┃]\s*›/u.test(l));
+  }
   credentialLocator() {
     return codexCredentialLocator();
   }
@@ -10849,6 +10864,9 @@ var CursorRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectCursorSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /[│┃]\s*[›>]\s/u.test(l));
+  }
   credentialLocator() {
     return cursorCredentialLocator();
   }
@@ -11056,6 +11074,12 @@ var AiderRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectAiderSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => {
+      const t2 = l.replace(/\x1B\[[^@-~]*[@-~]/g, "").trim();
+      return t2 === ">" || /^>\s*$/.test(t2) || /^\.\.\.\s*>\s*$/.test(t2);
+    });
+  }
   credentialLocator() {
     return aiderCredentialLocator();
   }
@@ -11157,7 +11181,7 @@ var ChromeStepTracker = class {
 // src/services/output/chunk-emitter.ts
 var https3 = __toESM(require("https"));
 var http3 = __toESM(require("http"));
-var API_BASE3 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE3 = resolveApiBaseUrl();
 var ChunkEmitter = class {
   constructor(opts) {
     this.opts = opts;
@@ -11353,6 +11377,20 @@ var OutputService = class _OutputService {
   emitter;
   runtime;
   lastSentContent = "";
+  /**
+   * Wall-clock of the most recent tick where the rendered + filtered
+   * content actually changed. Most agent TUIs keep redrawing a
+   * spinner + input prompt after the response is settled (Claude:
+   * `? for shortcuts`; Codex: ratatui input bar), which keeps
+   * `pty.lastPushTime` moving and prevents the PTY-idle heuristic
+   * from ever crossing the IDLE_MS threshold — so the turn never
+   * finalises and `done: true` never reaches the webapp's
+   * canonical-refresh path. Tracking content-stability separately
+   * closes that hole: PTY can churn all it wants, but once the
+   * filtered TUI output stops changing for a beat we know the
+   * agent is done.
+   */
+  lastContentChangeAt = 0;
   pollTimer = null;
   startTime = 0;
   terminalTurnPending = false;
@@ -11366,6 +11404,22 @@ var OutputService = class _OutputService {
   static IDLE_MS = 3e3;
   /** Same threshold but tighter for selectors (UI is ready to interact immediately). */
   static SELECTOR_IDLE_MS = 1500;
+  /**
+   * Content-stable threshold. When the rendered + filtered content
+   * hasn't changed for this long AND we can see Claude's "? for
+   * shortcuts" prompt re-drawn at the bottom (= back to input
+   * state), we know the response is settled even though the PTY
+   * itself is still pushing spinner / status redraws. Tighter than
+   * IDLE_MS because the ready-prompt is a strong signal on its own.
+   */
+  static READY_STABLE_MS = 800;
+  /**
+   * Hard content-stable fallback. If the filtered content has been
+   * unchanged for this long, finalize regardless of the ready
+   * prompt — covers cases where Claude's TUI doesn't redraw the
+   * shortcuts line (older versions, headless runs).
+   */
+  static CONTENT_STABLE_MS = 8e3;
   /**
    * Grace period before tick processes anything — Claude needs ~100-
    * 200 ms after `\r` to clear the input echo and re-render the TUI.
@@ -11487,6 +11541,7 @@ var OutputService = class _OutputService {
     this.pty.activate();
     this.steps.reset();
     this.lastSentContent = "";
+    this.lastContentChangeAt = 0;
     this.startTime = Date.now();
     this.pollTimer = setInterval(() => this.tick(), _OutputService.POLL_MS);
   }
@@ -11579,18 +11634,32 @@ var OutputService = class _OutputService {
       return;
     }
     const idleMs = this.pty.lastPushTime > 0 ? now - this.pty.lastPushTime : elapsed;
+    if (content !== this.lastSentContent) {
+      this.lastContentChangeAt = now;
+      this.lastSentContent = content;
+      this.send({ type: "text", content, done: false }).catch(() => {
+      });
+    }
+    const contentStableMs = this.lastContentChangeAt > 0 ? now - this.lastContentChangeAt : 0;
+    const readyPrompt = this.runtime.detectReadyPrompt?.(lines) ?? false;
     log.trace(
       "outputSvc",
-      `tick content (raw=${this.pty.size}B lines=${lines.length} content=${content.length} idleMs=${idleMs})`
+      `tick content (raw=${this.pty.size}B lines=${lines.length} content=${content.length} idleMs=${idleMs} stableMs=${contentStableMs} ready=${readyPrompt})`
     );
     if (idleMs >= _OutputService.IDLE_MS) {
+      log.trace("outputSvc", `finalize: idleMs=${idleMs}`);
       this.finalize();
       return;
     }
-    if (content !== this.lastSentContent) {
-      this.lastSentContent = content;
-      this.send({ type: "text", content, done: false }).catch(() => {
-      });
+    if (readyPrompt && contentStableMs >= _OutputService.READY_STABLE_MS) {
+      log.trace("outputSvc", `finalize: readyPrompt + stableMs=${contentStableMs}`);
+      this.finalize();
+      return;
+    }
+    if (contentStableMs >= _OutputService.CONTENT_STABLE_MS) {
+      log.trace("outputSvc", `finalize: stableMs=${contentStableMs} (fallback)`);
+      this.finalize();
+      return;
     }
   }
   finalize() {
@@ -11662,7 +11731,7 @@ var historyRecordSchema = import_zod.z.object({
     content: import_zod.z.union([import_zod.z.string(), import_zod.z.array(import_zod.z.unknown())]).optional()
   }).passthrough().optional()
 }).passthrough();
-var API_BASE4 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE4 = resolveApiBaseUrl();
 function extractText2(content) {
   if (typeof content === "string") return content;
   if (Array.isArray(content)) {
@@ -12269,7 +12338,7 @@ function _post2(url, headers, payload) {
 }
 
 // src/services/file-watcher.service.ts
-var API_BASE5 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE5 = resolveApiBaseUrl();
 var DEBOUNCE_MS = 250;
 var MAX_RETRIES = 2;
 var RETRY_BACKOFF_MS = 300;
@@ -12745,7 +12814,7 @@ function _get(url, headers) {
 }
 
 // src/services/streaming-emitter.service.ts
-var API_BASE6 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE6 = resolveApiBaseUrl();
 var TICK_MS = 50;
 var ANSWER_POLL_MS = 1500;
 var SELECTOR_STABLE_MS = 800;
@@ -14617,7 +14686,7 @@ async function pair(args2 = []) {
 var fs24 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
 var import_crypto6 = require("crypto");
-var API_BASE7 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE7 = resolveApiBaseUrl();
 function fail(msg) {
   console.error(`
   ${msg}
@@ -14847,7 +14916,7 @@ function status() {
 
 // src/commands/logout.ts
 var import_picocolors6 = __toESM(require("picocolors"));
-var API_BASE8 = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+var API_BASE8 = resolveApiBaseUrl();
 async function notifyBackendOffline() {
   const cfg = loadCliConfig();
   const pluginIds = /* @__PURE__ */ new Set([
@@ -17321,8 +17390,8 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.19.0" : "0.0.0-dev";
-  const apiBase = process.env.CODEAM_API_URL ?? DEFAULT_API_BASE_URL;
+  const cliVersion = true ? "2.20.1" : "0.0.0-dev";
+  const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto5.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
   const [dns, health] = await Promise.all([
@@ -17372,6 +17441,13 @@ ${import_picocolors12.default.bold("  codeam doctor")}
 `);
   out2.write(`  ${import_picocolors12.default.dim("api")}      ${r.apiBase}
 `);
+  if (process.env.CODEAM_TEST_MODE === "1" || process.env.CODEAM_TEST_MODE?.toLowerCase() === "true") {
+    out2.write(`  ${import_picocolors12.default.dim("mode")}     ${import_picocolors12.default.yellow("TEST_MODE \u2014 using dev preview")}
+`);
+  } else if (process.env.CODEAM_API_URL) {
+    out2.write(`  ${import_picocolors12.default.dim("mode")}     ${import_picocolors12.default.yellow("CODEAM_API_URL override")}
+`);
+  }
   out2.write(`  ${import_picocolors12.default.dim("diag id")}  ${r.diagnosticId}
 `);
   out2.write("\n");
@@ -17513,7 +17589,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.19.0" : "unknown";
+  const v = true ? "2.20.1" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -17741,7 +17817,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.19.0" : null;
+  const current = true ? "2.20.1" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.19.0",
+  "version": "2.20.1",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",