codeam-cli 2.27.5 → 2.27.7

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.27.6] — 2026-06-06
+
+### Fixed
+
+- **cli:** ACP runner — ack every relay command + body envelope for auth
+
+## [2.27.5] — 2026-06-06
+
+### Chore
+
+- **cli:** Drop cursor-agent-acp — pulls deprecated SDK
+
 ## [2.27.4] — 2026-06-06
 
 ### Tests

package/dist/index.js

@@ -498,7 +498,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.27.5",
+  version: "2.27.7",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -5873,7 +5873,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.27.5" : "0.0.0-dev",
+    cliVersion: true ? "2.27.7" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -12058,6 +12058,7 @@ var fs21 = __toESM(require("fs/promises"));
 var import_node_stream = require("stream");
 var import_sdk = require("@agentclientprotocol/sdk");
 var PROTOCOL_VERSION2 = 1;
+var PROMPT_TIMEOUT_MS = 9e4;
 var CLIENT_CAPABILITIES = {
   fs: { readTextFile: true, writeTextFile: true },
   terminal: false
@@ -12079,6 +12080,10 @@ var AcpClient = class {
   async start() {
     if (this.child) throw new Error("AcpClient already started");
     const { adapter, cwd } = this.opts;
+    log.info(
+      "acpClient",
+      `spawn cmd=${adapter.command} args=[${adapter.args.join(",")}] cwd=${cwd}`
+    );
     const child = (0, import_node_child_process11.spawn)(adapter.command, adapter.args, {
       cwd,
       env: process.env,
@@ -12089,7 +12094,10 @@ var AcpClient = class {
     child.stderr?.on("data", (chunk2) => {
       for (const line of chunk2.split(/\r?\n/)) {
         const trimmed = line.trim();
-        if (trimmed) this.opts.onStderr?.(trimmed);
+        if (trimmed) {
+          log.info("acpAdapter", trimmed);
+          this.opts.onStderr?.(trimmed);
+        }
       }
     });
     child.on("exit", (code, signal) => {
@@ -12107,15 +12115,22 @@ var AcpClient = class {
       (_agent) => this.buildClient(),
       stream
     );
+    log.info("acpClient", "initialize \u2192 sending");
     const initialize = await this.connection.initialize({
       protocolVersion: PROTOCOL_VERSION2,
       clientCapabilities: CLIENT_CAPABILITIES
     });
+    log.info(
+      "acpClient",
+      `initialize \u2190 ok protocolVersion=${initialize.protocolVersion} agentCaps=${JSON.stringify(initialize.agentCapabilities ?? {}).slice(0, 200)}`
+    );
+    log.info("acpClient", "newSession \u2192 sending");
     const newSession = await this.connection.newSession({
       cwd,
       mcpServers: []
     });
     this.sessionId = newSession.sessionId;
+    log.info("acpClient", `newSession \u2190 ok sessionId=${newSession.sessionId.slice(0, 8)}`);
     return { sessionId: newSession.sessionId, initialize };
   }
   /**
@@ -12123,15 +12138,49 @@ var AcpClient = class {
    * {@link PromptResponse} which carries the agent's stop reason
    * once the turn finishes. Session/update notifications keep
    * arriving on `onSessionUpdate` while the turn streams.
+   *
+   * Wrapped in a hard timeout because adapters CAN hang silently
+   * when their underlying agent's auth/network is broken — without
+   * a ceiling the relay command sits "pending" forever and mobile
+   * shows a permanent "Thinking…" spinner with no way to recover.
    */
   async prompt(text) {
     if (!this.connection || !this.sessionId) {
       throw new Error("AcpClient.prompt called before start()");
     }
-    return this.connection.prompt({
+    log.info(
+      "acpClient",
+      `prompt \u2192 session=${this.sessionId.slice(0, 8)} chars=${text.length}`
+    );
+    const t0 = Date.now();
+    const send = this.connection.prompt({
       sessionId: this.sessionId,
       prompt: [{ type: "text", text }]
     });
+    const timeout = new Promise((_resolve, reject) => {
+      const id = setTimeout(() => {
+        reject(
+          new Error(
+            `ACP prompt timed out after ${PROMPT_TIMEOUT_MS / 1e3}s \u2014 adapter never responded. Likely the underlying agent's auth or network is misconfigured; check the adapter stderr lines above (acpAdapter tag) for the actual error.`
+          )
+        );
+      }, PROMPT_TIMEOUT_MS);
+      void send.finally(() => clearTimeout(id));
+    });
+    try {
+      const result = await Promise.race([send, timeout]);
+      log.info(
+        "acpClient",
+        `prompt \u2190 ok stopReason=${result.stopReason ?? "?"} elapsedMs=${Date.now() - t0}`
+      );
+      return result;
+    } catch (err) {
+      log.warn(
+        "acpClient",
+        `prompt \u2190 failed elapsedMs=${Date.now() - t0} err=${err instanceof Error ? err.message : String(err)}`
+      );
+      throw err;
+    }
   }
   /**
    * Cancel the in-flight prompt turn. Notification — no response.
@@ -12324,6 +12373,21 @@ var AcpPublisher = class {
   opts;
   apiBase;
   headers;
+  /**
+   * Wrap the event with `sessionId` + `pluginId` at the top level.
+   * The backend's `PluginAuthGuard` reads both fields from the JSON
+   * body even when `X-Plugin-Auth-Token` is set on the header and
+   * `:sessionId` is on the URL path. Without the body fields it
+   * rejects every POST with `PLUGIN_TOKEN_REQUIRED` — same shape the
+   * legacy `streaming-emitter.service.ts` `postWithRetries` uses.
+   */
+  envelope(event) {
+    return JSON.stringify({
+      sessionId: this.opts.sessionId,
+      pluginId: this.opts.pluginId,
+      ...event
+    });
+  }
   /**
    * Fire-and-forget chunk POST. The backend's per-user SSE bus
    * forwards each chunk to mobile/landing within ~20 ms (PRO) /
@@ -12336,7 +12400,7 @@ var AcpPublisher = class {
       const { statusCode, body } = await _transport2.post(
         url,
         this.headers,
-        JSON.stringify(event)
+        this.envelope(event)
       );
       if (statusCode < 200 || statusCode >= 300) {
         log.warn("acpPublisher", `chunk status=${statusCode} body=${body.slice(0, 200)}`);
@@ -12357,7 +12421,7 @@ var AcpPublisher = class {
       const { statusCode, body } = await _transport2.post(
         url,
         this.headers,
-        JSON.stringify(event)
+        this.envelope(event)
       );
       if (statusCode < 200 || statusCode >= 300) {
         log.warn("acpPublisher", `awaiting-answer status=${statusCode} body=${body.slice(0, 200)}`);
@@ -12553,13 +12617,22 @@ async function runAcpSession(opts) {
     pluginId: opts.pluginId,
     pluginAuthToken: opts.pluginAuthToken
   });
+  let updateCount = 0;
   const client2 = new AcpClient({
     adapter: opts.adapter,
     cwd: opts.cwd,
     onSessionUpdate: (notification) => {
+      updateCount += 1;
+      const variant = notification.update?.sessionUpdate ?? "unknown";
       const chunks = mapSessionUpdate(notification);
+      log.info(
+        "acpRunner",
+        `update #${updateCount} variant=${variant} mappedChunks=${chunks.length}`
+      );
       for (const chunk2 of chunks) {
-        void publisher.publishChunk(chunk2);
+        void publisher.publishChunk(chunk2).catch((err) => {
+          log.warn("acpRunner", `publishChunk failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
       }
     },
     onRequestPermission: async (request) => {
@@ -12579,8 +12652,7 @@ async function runAcpSession(opts) {
       }
       return { outcome: { outcome: "selected", optionId } };
     },
-    onStderr: (line) => {
-      log.trace("acpAdapter", line);
+    onStderr: (_line) => {
     },
     onUnexpectedExit: (code, signal) => {
       log.warn("acpRunner", `adapter died code=${code} signal=${signal}; shutting down session`);
@@ -12599,10 +12671,13 @@ async function runAcpSession(opts) {
     "acpRunner",
     `adapter handshake ok protocolVersion=${initialize.protocolVersion} sessionId=${acpSessionId.slice(0, 8)}`
   );
+  showSuccess(`${opts.agent} online (ACP) \u2014 awaiting prompts from mobile.`);
+  const runtime = createInteractiveAgentStrategy(opts.agent, createOsStrategy());
+  const models = await runtime.listModels();
   const relay = new CommandRelayService(
     opts.pluginId,
     async (cmd) => {
-      await handleCommand(cmd, client2);
+      await handleCommand(cmd, client2, relay, acpSessionId, models);
     },
     { id: opts.agent, name: opts.agent, displayName: opts.agent }
   );
@@ -12619,19 +12694,24 @@ async function runAcpSession(opts) {
   await new Promise(() => {
   });
 }
-async function handleCommand(cmd, client2) {
+async function handleCommand(cmd, client2, relay, acpSessionId, models) {
   switch (cmd.type) {
     case "start_task": {
       const payload = cmd.payload;
       const prompt = payload?.prompt?.trim();
       if (!prompt) {
         log.warn("acpRunner", "start_task with empty prompt; ignoring");
+        await relay.sendResult(cmd.id, "failed", { error: "empty prompt" });
         return;
       }
+      log.info("acpRunner", `start_task \u2192 forwarding prompt chars=${prompt.length} id=${cmd.id.slice(0, 8)}`);
       try {
-        await client2.prompt(prompt);
+        const reply = await client2.prompt(prompt);
+        log.info("acpRunner", `start_task \u2190 done stopReason=${reply.stopReason ?? "?"} id=${cmd.id.slice(0, 8)}`);
+        await relay.sendResult(cmd.id, "completed", { stopReason: reply.stopReason });
       } catch (err) {
         log.warn("acpRunner", `prompt failed: ${describeError(err)}`);
+        await relay.sendResult(cmd.id, "failed", { error: describeError(err) });
       }
       return;
     }
@@ -12639,13 +12719,31 @@ async function handleCommand(cmd, client2) {
     case "escape_key": {
       try {
         await client2.cancel();
+        await relay.sendResult(cmd.id, "completed", {});
       } catch (err) {
         log.warn("acpRunner", `cancel failed: ${describeError(err)}`);
+        await relay.sendResult(cmd.id, "failed", { error: describeError(err) });
       }
       return;
     }
+    case "get_conversation": {
+      await relay.sendResult(cmd.id, "completed", { conversationId: acpSessionId });
+      return;
+    }
+    case "list_models": {
+      await relay.sendResult(cmd.id, "completed", { models });
+      return;
+    }
+    case "set_keep_alive":
+    case "get_context": {
+      await relay.sendResult(cmd.id, "completed", {});
+      return;
+    }
     default:
       log.trace("acpRunner", `command type "${cmd.type}" not supported in Phase 1 ACP mode`);
+      await relay.sendResult(cmd.id, "failed", {
+        error: `Command "${cmd.type}" is not supported in Phase 1 ACP mode.`
+      });
       return;
   }
 }
@@ -14816,7 +14914,7 @@ async function discoverRepos(workingDir, maxDepth = 4) {
 // src/services/turn-files/files-outbox.ts
 var fs24 = __toESM(require("fs/promises"));
 var path29 = __toESM(require("path"));
-var import_os7 = require("os");
+var import_os8 = require("os");
 var HOME_OUTBOX_DIR = ".codeam/outbox";
 var MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 var BACKOFF_STEPS_MS = [
@@ -14983,7 +15081,7 @@ function applyJitter(ms) {
   return Math.round(ms * factor);
 }
 function homeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os7.tmpdir)();
+  return process.env.HOME ?? process.env.USERPROFILE ?? (0, import_os8.tmpdir)();
 }
 
 // src/services/turn-files/turn-file-aggregator.ts
@@ -16932,11 +17030,11 @@ async function linkDryRunPreflight(ctx) {
 var import_promises = require("dns/promises");
 var import_fs = require("fs");
 var import_promises2 = __toESM(require("fs/promises"));
-var import_os8 = __toESM(require("os"));
+var import_os9 = __toESM(require("os"));
 var import_path4 = __toESM(require("path"));
 var import_promises3 = require("stream/promises");
 var import_which = __toESM(require("which"));
-var CACHED_BINARY = import_path4.default.join(import_os8.default.homedir(), ".codeam", "bin", "cloudflared");
+var CACHED_BINARY = import_path4.default.join(import_os9.default.homedir(), ".codeam", "bin", "cloudflared");
 async function waitForCloudflaredReady(url, timeoutMs = 6e4) {
   const hostname3 = new URL(url).hostname;
   const resolver = new import_promises.Resolver();
@@ -21132,7 +21230,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.27.5" : "0.0.0-dev";
+  const cliVersion = true ? "2.27.7" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -21331,7 +21429,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.27.5" : "unknown";
+  const v = true ? "2.27.7" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -21559,7 +21657,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.27.5" : null;
+  const current = true ? "2.27.7" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.27.5",
+  "version": "2.27.7",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",