codeam-cli 2.65.3 → 2.65.5

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.65.4] — 2026-08-14
+
+### Fixed
+
+- **cli:** Handoff protocol tolerates display-name targets + inline degenerate fences
+- **cli:** Degenerate handoff form must be reply-trailing (kills fabricated-proposal false positive)
+
+## [2.65.3] — 2026-08-14
+
+### Fixed
+
+- **cli:** Strip squad-context + agent meta blocks from codex hydration (title/summary leak)
+
 ## [2.65.2] — 2026-08-14
 
 ### Added

package/dist/index.js

@@ -976,6 +976,12 @@ var PUBLIC_TO_INTERNAL = {
   // MiniMax proxy). Its internal runtime is therefore `claude`.
   [HOUSE_AGENT_ID]: "claude"
 };
+function isPublicToInternalKey(v) {
+  return Object.prototype.hasOwnProperty.call(PUBLIC_TO_INTERNAL, v);
+}
+function publicToInternal(publicId) {
+  return isPublicToInternalKey(publicId) ? PUBLIC_TO_INTERNAL[publicId] : null;
+}
 var TERMINAL_AGENT_PREFIX = "__terminal__:";
 var AGENT_ID_ALIASES = {
   claude_code: "claude",
@@ -8073,7 +8079,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.65.3" : "0.0.0-dev",
+    cliVersion: true ? "2.65.5" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8254,7 +8260,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.65.3",
+  version: "2.65.5",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9706,7 +9712,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.65.3" ? { ideVersion: "2.65.3" } : {}
+      ..."2.65.5" ? { ideVersion: "2.65.5" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -15717,11 +15723,17 @@ var TEAM_PREAMBLE_MARKER = "[Team context]";
 var TEAM_PREAMBLE_LINES = [
   "[Team context] You are the active agent in a CodeAgent Mobile session where the user",
   "has a squad of agents and can pass work between them. Your available teammates:",
-  "If a task clearly fits a teammate better than you, you MAY propose a handoff by ending",
-  `your reply with a fenced code block tagged ${HANDOFF_FENCE_TAG} containing ONE JSON object:`,
+  "If a task clearly fits a teammate better than you, you MAY propose a handoff. The fence",
+  `MUST be a three-backtick code block with the info string exactly ${HANDOFF_FENCE_TAG}`,
+  "(never a single backtick, never bare text) with the JSON alone on its own line inside",
+  "it, exactly like this:",
+  "```" + HANDOFF_FENCE_TAG,
   '{"to":"<teammate id>","reason":"<one sentence>","prompt":"<the prompt they should run>"}',
-  "Propose at most one handoff per reply, only when genuinely better, and never announce",
-  "the block in prose \u2014 the app renders it as a card the user can accept."
+  "```",
+  '"to" MUST be one of the ids shown above, written EXACTLY as shown (e.g. "claude", never',
+  'a display name like "Claude Code"). Propose at most one handoff per reply, only when',
+  "genuinely better, and never announce the block in prose \u2014 the app renders it as a card",
+  "the user can accept."
 ];
 var TEAM_PREAMBLE_BULLET_RE = /^- .+ — best at: /;
 var BRIEFING_MARKER = "[Team update]";
@@ -15733,7 +15745,9 @@ function buildTeamPreamble(roster, currentAgent, opts) {
   const lines = [
     TEAM_PREAMBLE_LINES[0],
     TEAM_PREAMBLE_LINES[1],
-    ...others.map((a) => `- ${a.displayName} \u2014 best at: ${specialtyFor(a.agentId)}`)
+    ...others.map(
+      (a) => `- ${a.displayName} (id: ${a.agentId}) \u2014 best at: ${specialtyFor(a.agentId)}`
+    )
   ];
   if (opts.handoffInstructions) {
     lines.push(...TEAM_PREAMBLE_LINES.slice(2));
@@ -21627,7 +21641,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.65.3" : null;
+  const current2 = true ? "2.65.5" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21644,7 +21658,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.65.3" : null;
+  const current2 = true ? "2.65.5" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -21664,7 +21678,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.65.3" : null;
+  return true ? "2.65.5" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -35365,6 +35379,13 @@ var REASON_MAX = 1e3;
 var PROMPT_MAX2 = 8e3;
 var FENCE_OPEN = "```" + HANDOFF_FENCE_TAG;
 var FENCE_RE = new RegExp("```" + HANDOFF_FENCE_TAG + "\\s*\\n([\\s\\S]*?)\\n?```", "g");
+var DEGENERATE_LINE_RE = new RegExp(
+  "^[ \\t]*(`{0,2})[ \\t]*" + HANDOFF_FENCE_TAG + "[ \\t]+(\\{.*\\})[ \\t]*\\1[ \\t]*\\r?$"
+);
+var TAG_ONLY_LINE_RE = new RegExp(
+  "^[ \\t]*`{0,2}[ \\t]*" + HANDOFF_FENCE_TAG + "[ \\t]*`{0,2}[ \\t]*\\r?$"
+);
+var CLOSING_BACKTICK_LINE_RE = /^[ \t]*`+[ \t]*\r?$/;
 var OUTER_FENCE_RE = /(`{4,})[\s\S]*?\1/g;
 var outerFencePlaceholder = (i) => `@@HANDOFF_MASK_${i}@@`;
 function maskOuterFences(text) {
@@ -35377,62 +35398,187 @@ function maskOuterFences(text) {
   const restore = (s) => spans.reduce((acc, span, i) => acc.split(outerFencePlaceholder(i)).join(span), s);
   return { masked, restore };
 }
-function parseProposal(raw, currentAgent, validTargets) {
+function parseProposalShape(raw) {
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch {
-    log.debug("handoffProtocol", "dropped proposal: malformed JSON");
-    return null;
-  }
-  if (typeof parsed !== "object" || parsed === null) {
-    log.debug("handoffProtocol", "dropped proposal: not a JSON object");
     return null;
   }
+  if (typeof parsed !== "object" || parsed === null) return null;
   const { to, reason, prompt } = parsed;
-  if (typeof to !== "string" || to.length === 0) {
-    log.debug("handoffProtocol", 'dropped proposal: missing/invalid "to"');
+  if (typeof to !== "string" || to.length === 0) return null;
+  if (typeof reason !== "string" || reason.length === 0 || reason.length > REASON_MAX) {
     return null;
   }
-  if (!validTargets.has(to)) {
-    log.debug("handoffProtocol", `dropped proposal: unknown target "${to}"`);
+  if (typeof prompt !== "string" || prompt.length === 0 || prompt.length > PROMPT_MAX2) {
     return null;
   }
-  if (to === currentAgent) {
-    log.debug("handoffProtocol", "dropped proposal: target is the current agent");
+  return { to, reason, prompt };
+}
+function resolveHandoffTarget(raw, validTargets) {
+  const trimmed = (raw ?? "").trim();
+  if (!trimmed) return null;
+  const lower = trimmed.toLowerCase();
+  for (const target of validTargets) {
+    if (target.toLowerCase() === lower) return target;
+  }
+  const viaAlias = normalizeAgentId(trimmed);
+  if (viaAlias && validTargets.has(viaAlias)) return viaAlias;
+  const viaPublic = publicToInternal(lower);
+  if (viaPublic && validTargets.has(viaPublic)) return viaPublic;
+  for (const meta of Object.values(AGENT_REGISTRY)) {
+    if (meta.displayName.toLowerCase() === lower && validTargets.has(meta.id)) {
+      return meta.id;
+    }
+  }
+  return null;
+}
+function parseProposal(raw, currentAgent, validTargets) {
+  const shape = parseProposalShape(raw);
+  if (!shape) {
+    log.debug("handoffProtocol", "dropped proposal: malformed JSON or invalid shape");
     return null;
   }
-  if (typeof reason !== "string" || reason.length === 0 || reason.length > REASON_MAX) {
-    log.debug("handoffProtocol", 'dropped proposal: invalid "reason"');
+  const to = resolveHandoffTarget(shape.to, validTargets);
+  if (!to) {
+    log.debug("handoffProtocol", `dropped proposal: unknown target "${shape.to}"`);
     return null;
   }
-  if (typeof prompt !== "string" || prompt.length === 0 || prompt.length > PROMPT_MAX2) {
-    log.debug("handoffProtocol", 'dropped proposal: invalid "prompt"');
+  if (to === currentAgent) {
+    log.debug("handoffProtocol", "dropped proposal: target is the current agent");
     return null;
   }
-  return { to, reason, prompt };
+  return { to, reason: shape.reason, prompt: shape.prompt };
+}
+function collapseSeams(s) {
+  return s.replace(/(?:\r?\n){3,}/g, "\n\n").trim();
 }
 function stripFences(masked) {
-  const stripped = masked.replace(FENCE_RE, "");
-  return stripped.replace(/(?:\r?\n){3,}/g, "\n\n").trim();
+  return collapseSeams(masked.replace(FENCE_RE, ""));
+}
+function lineStarts(parts) {
+  const starts = [];
+  let offset = 0;
+  for (const p2 of parts) {
+    starts.push(offset);
+    offset += p2.length + 1;
+  }
+  return starts;
+}
+function lastNonBlankLine(masked) {
+  const parts = masked.split("\n");
+  const starts = lineStarts(parts);
+  for (let i = parts.length - 1; i >= 0; i--) {
+    if (parts[i].trim().length > 0) return { line: parts[i], start: starts[i] };
+  }
+  return null;
+}
+function trailingSameLineMatch(masked) {
+  const last = lastNonBlankLine(masked);
+  if (!last) return null;
+  const m = last.line.match(DEGENERATE_LINE_RE);
+  if (!m) return null;
+  return { jsonRaw: m[2], start: last.start, end: last.start + m[0].length };
+}
+function trailingBlockMatch(masked) {
+  const lines = masked.split("\n");
+  const starts = lineStarts(lines);
+  let tagLineIdx = -1;
+  for (let i = lines.length - 1; i >= 0; i--) {
+    if (TAG_ONLY_LINE_RE.test(lines[i])) {
+      tagLineIdx = i;
+      break;
+    }
+  }
+  if (tagLineIdx === -1) return null;
+  let end = lines.length - 1;
+  while (end > tagLineIdx && lines[end].trim().length === 0) end--;
+  if (end > tagLineIdx && CLOSING_BACKTICK_LINE_RE.test(lines[end])) {
+    end--;
+    while (end > tagLineIdx && lines[end].trim().length === 0) end--;
+  }
+  if (end <= tagLineIdx) return null;
+  const jsonRaw = lines.slice(tagLineIdx + 1, end + 1).join("\n");
+  return { jsonRaw, start: starts[tagLineIdx], end: masked.length };
+}
+function trailingDegenerateMatch(masked) {
+  return trailingSameLineMatch(masked) ?? trailingBlockMatch(masked);
+}
+function earlierShapeValidDegenerateSpans(masked, beforeOffset) {
+  const lines = masked.split("\n");
+  const starts = lineStarts(lines);
+  const spans = [];
+  for (let i = 0; i < lines.length && starts[i] < beforeOffset; i++) {
+    const same = lines[i].match(DEGENERATE_LINE_RE);
+    if (same) {
+      const end = starts[i] + same[0].length;
+      if (end <= beforeOffset && parseProposalShape(same[2].trim())) {
+        spans.push({ start: starts[i], end });
+      }
+      continue;
+    }
+    if (TAG_ONLY_LINE_RE.test(lines[i])) {
+      let j2 = i + 1;
+      while (j2 < lines.length && lines[j2].trim().length === 0) j2++;
+      if (j2 >= lines.length || starts[j2] >= beforeOffset) continue;
+      if (!parseProposalShape(lines[j2].trim())) continue;
+      let end = starts[j2] + lines[j2].length;
+      let k2 = j2 + 1;
+      if (k2 < lines.length && starts[k2] < beforeOffset && CLOSING_BACKTICK_LINE_RE.test(lines[k2])) {
+        end = starts[k2] + lines[k2].length;
+      }
+      if (end <= beforeOffset) spans.push({ start: starts[i], end });
+    }
+  }
+  return spans;
+}
+function removeSpans(text, spans) {
+  const sorted = [...spans].sort((a, b) => a.start - b.start);
+  let result = "";
+  let cursor = 0;
+  for (const span of sorted) {
+    result += text.slice(cursor, span.start);
+    cursor = span.end;
+  }
+  result += text.slice(cursor);
+  return result;
 }
 function extractHandoffProposal(text, currentAgent, validTargets) {
   const { masked, restore } = maskOuterFences(text);
   const matches = [...masked.matchAll(FENCE_RE)];
-  if (matches.length === 0) {
+  if (matches.length > 0) {
+    const last = matches[matches.length - 1];
+    const proposal = parseProposal(last[1].trim(), currentAgent, validTargets);
+    const cleanText = restore(stripFences(masked));
+    return { cleanText, proposal };
+  }
+  const degenerate = trailingDegenerateMatch(masked);
+  if (degenerate) {
+    const proposal = parseProposal(degenerate.jsonRaw.trim(), currentAgent, validTargets);
+    if (proposal) {
+      const earlier = earlierShapeValidDegenerateSpans(masked, degenerate.start);
+      const stripped = removeSpans(masked, [
+        ...earlier,
+        { start: degenerate.start, end: degenerate.end }
+      ]);
+      return { cleanText: restore(collapseSeams(stripped)), proposal };
+    }
     return { cleanText: text, proposal: null };
   }
-  const last = matches[matches.length - 1];
-  const proposal = parseProposal(last[1].trim(), currentAgent, validTargets);
-  const cleanText = restore(stripFences(masked));
-  return { cleanText, proposal };
+  return { cleanText: text, proposal: null };
 }
 function stripHandoffFences(text) {
   const { masked, restore } = maskOuterFences(text);
-  if (masked.search(FENCE_RE) === -1) {
-    return text;
+  if (masked.search(FENCE_RE) !== -1) {
+    return restore(stripFences(masked));
+  }
+  const degenerate = trailingDegenerateMatch(masked);
+  if (degenerate && parseProposalShape(degenerate.jsonRaw.trim())) {
+    const stripped = masked.slice(0, degenerate.start) + masked.slice(degenerate.end);
+    return restore(collapseSeams(stripped));
   }
-  return restore(stripFences(masked));
+  return text;
 }
 function handoffFenceStartMasked(text) {
   const { masked } = maskOuterFences(text);
@@ -44499,7 +44645,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.65.3" : "0.0.0-dev";
+  const cliVersion = true ? "2.65.5" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -44890,7 +45036,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.65.3" : "unknown";
+  const v = true ? "2.65.5" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.65.3",
+  "version": "2.65.5",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",