codeam-cli 2.74.13 → 2.74.14

package/CHANGELOG.md

@@ -4,6 +4,36 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.74.13] — 2026-09-10
+
+### Added
+
+- **cli:** Open the command stream on the stream host with a one-time api-host fallback (#745)
+
+### Build
+
+- **deps:** Bump gradle-wrapper in /apps/jetbrains-plugin (#661)
+- **deps:** Bump com.squareup.okhttp3:okhttp in /apps/jetbrains-plugin (#641)
+- **deps:** Bump actions/setup-java from 5 to 6 (#662)
+
+### CI
+
+- **workflow:** Root the npm Dependabot config at the workspace, so its PRs can actually install (#737)
+
+### Chore
+
+- **deps:** Bump org.jetbrains.kotlin.jvm in /apps/jetbrains-plugin (#743)
+- **deps:** Bump docker/setup-buildx-action from 3 to 4 (#414)
+- **deps:** Bump actions/checkout from 4 to 7 (#366)
+- **deps:** Bump ws from 8.21.0 to 8.21.3 (#740)
+- **deps:** Bump posthog-node from 5.35.1 to 5.51.6 (#741)
+- **deps-dev:** Bump knip from 6.25.0 to 6.34.0 (#742)
+
+### Fixed
+
+- **cli:** Local baton sessions go silent on mobile after the mirror's 10-min startup wait (#744)
+- **vsc-plugin:** Stop advertising a Copilot agent the plugin cannot dispatch to (#746)
+
 ## [2.74.12] — 2026-09-09
 
 ### Fixed

package/dist/index.js

@@ -10199,7 +10199,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.74.13" : "0.0.0-dev",
+    cliVersion: true ? "2.74.14" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10441,7 +10441,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.74.13",
+  version: "2.74.14",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12131,7 +12131,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.74.13" ? { ideVersion: "2.74.13" } : {}
+      ..."2.74.14" ? { ideVersion: "2.74.14" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -24451,7 +24451,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.74.13" : null;
+  const current2 = true ? "2.74.14" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24468,7 +24468,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.74.13" : null;
+  const current2 = true ? "2.74.14" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -24491,7 +24491,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.74.13" : null;
+  return true ? "2.74.14" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -39845,13 +39845,17 @@ function createWakeCredentialProbe(deps) {
 function reconcileCumulative(existing, incoming) {
   if (incoming.length === 0) return existing;
   if (incoming.startsWith(existing)) return incoming;
-  if (existing.startsWith(incoming)) return existing;
   const shared = commonPrefixLength(existing, incoming);
-  if (shared > 0 && shared >= existing.length / 2) {
+  if (looksLikeSnapshot(existing, incoming, shared)) {
+    if (shared === incoming.length) return existing;
     return existing.slice(0, shared) + incoming.slice(shared);
   }
   return existing + incoming;
 }
+var MIN_SNAPSHOT_PREFIX = 8;
+function looksLikeSnapshot(existing, incoming, shared) {
+  return shared >= MIN_SNAPSHOT_PREFIX && shared * 2 >= existing.length && incoming.length * 2 >= existing.length;
+}
 function commonPrefixLength(a, b) {
   const max = Math.min(a.length, b.length);
   let i = 0;
@@ -40262,25 +40266,19 @@ function mapSessionUpdate(notification) {
   }
 }
 function mapPermissionRequest(request2) {
-  const prompt = describeToolCall(request2.toolCall) ?? "The agent requested permission to continue.";
-  const optionIdByLabel = {};
-  const kindByLabel = {};
-  const labels = [];
-  for (const opt of request2.options) {
-    const label = opt.name?.trim() || humanizeKind(opt.kind);
-    if (label in optionIdByLabel) continue;
-    optionIdByLabel[label] = opt.optionId;
-    kindByLabel[label] = opt.kind;
-    labels.push(label);
-  }
+  const prompt = describePermissionToolCall(request2.toolCall) ?? "The agent requested permission to continue.";
+  const options = request2.options.map((opt) => ({
+    label: opt.name?.trim() || humanizeKind(opt.kind),
+    optionId: opt.optionId,
+    kind: opt.kind
+  }));
   return {
     event: {
       questionId: (0, import_node_crypto10.randomUUID)(),
       prompt,
-      options: labels.length > 0 ? labels : void 0
+      options: options.length > 0 ? options.map((o) => ({ label: o.label, value: o.optionId })) : void 0
     },
-    optionIdByLabel,
-    kindByLabel
+    options
   };
 }
 function messageChunkId(messageId) {
@@ -40311,6 +40309,28 @@ function describeToolCall(call) {
   }
   return null;
 }
+var PERMISSION_DETAIL_MAX = 400;
+function permissionInputDetail(rawInput) {
+  if (!rawInput || typeof rawInput !== "object") return null;
+  const input = rawInput;
+  for (const key of ["command", "file_path", "path"]) {
+    const v = input[key];
+    if (typeof v === "string" && v.trim().length > 0) {
+      const detail = v.trim();
+      return detail.length > PERMISSION_DETAIL_MAX ? `${detail.slice(0, PERMISSION_DETAIL_MAX)}\u2026` : detail;
+    }
+  }
+  return null;
+}
+function describePermissionToolCall(call) {
+  const title = describeToolCall(call);
+  const detail = permissionInputDetail(call.rawInput);
+  if (!detail) return title;
+  if (!title) return detail;
+  if (title.includes(detail)) return title;
+  return `${title}
+${detail}`;
+}
 function describeToolCallUpdate(update) {
   const parts = [];
   if (Array.isArray(update.content)) {
@@ -40404,13 +40424,9 @@ function createOnRequestPermission(deps) {
       }
       log.warn("acpRunner", "AUTO mode \u2014 no allow option offered; falling back to interactive");
     }
-    const { event, optionIdByLabel } = mapPermissionRequest(request2);
+    const { event, options } = mapPermissionRequest(request2);
     await deps.publisher.publishAwaitingAnswer(event);
-    return deps.registerPermission({
-      questionId: event.questionId,
-      labels: event.options ?? [],
-      optionIdByLabel
-    });
+    return deps.registerPermission({ questionId: event.questionId, options });
   };
 }
 
@@ -43172,20 +43188,19 @@ async function selectOptionH(ctx) {
   const { cmd, client: client3, relay, streaming, history, budgetRecovery } = ctx;
   const payload = cmd.payload;
   const index = typeof payload?.index === "number" ? payload.index : 0;
-  const offset = typeof payload?.from === "number" ? payload.from : 0;
-  const absoluteIndex = index + offset;
-  if (await budgetRecovery.tryRecover(cmd.id, absoluteIndex)) return;
-  const result = streaming.resolveSelection(absoluteIndex);
+  const optionId = typeof payload?.optionId === "string" && payload.optionId.length > 0 ? payload.optionId : typeof payload?.answer === "string" && payload.answer.length > 0 ? payload.answer : void 0;
+  if (await budgetRecovery.tryRecover(cmd.id, index)) return;
+  const result = streaming.resolveSelection(index, optionId);
   switch (result.kind) {
     case "resolved":
-      log.info("acpRunner", `select_option index=${absoluteIndex} \u2192 permission resolved`);
-      await relay.sendResult(cmd.id, "completed", {});
-      return;
-    case "reprompt": {
       log.info(
         "acpRunner",
-        `select_option index=${absoluteIndex} \u2192 reprompt chars=${result.text.length}`
+        `select_option index=${index} \u2192 permission resolved optionId=${result.optionId ?? "cancelled"}`
       );
+      await relay.sendResult(cmd.id, "completed", {});
+      return;
+    case "reprompt": {
+      log.info("acpRunner", `select_option index=${index} \u2192 reprompt chars=${result.text.length}`);
       await streaming.beginTurn();
       history.appendUserPrompt(result.text);
       try {
@@ -43205,7 +43220,7 @@ async function selectOptionH(ctx) {
     case "none":
       log.warn(
         "acpRunner",
-        `select_option index=${absoluteIndex} arrived with no pending question \u2014 likely stale`
+        `select_option index=${index} arrived with no pending question \u2014 likely stale`
       );
       await relay.sendResult(cmd.id, "failed", {
         error: "No pending interactive question \u2014 the prompt may have expired."
@@ -43643,9 +43658,17 @@ var StreamingState = class {
   turnSeq = 0;
   /**
    * Register a permission Promise. The Promise stays pending until
-   * `resolveSelection(index)` is called from the relay handler, OR
-   * the safety timer fires after PERMISSION_TIMEOUT_MS and we
-   * default-reject. Caller is the SDK's `onRequestPermission`.
+   * `resolveSelection()` is called from the relay handler, OR the
+   * safety timer fires after PERMISSION_TIMEOUT_MS and we auto-cancel.
+   * Caller is the SDK's `onRequestPermission`.
+   *
+   * The auto-cancel is NEVER silent (same HARD RULE as the auto-denies
+   * in ./permission-gate.ts): a visible chat line says the request
+   * expired. The adapter reports a cancel to the model as a failed tool
+   * ("Tool use aborted"), which the model then narrates as a refusal —
+   * replay 01a08b05 (2026-09-10): two prompts expired while the user was
+   * in the preview, Claude told him HE had refused them twice, and he
+   * protested "J'ai rien refusé". The line is the user's evidence.
    */
   registerPermission(args2) {
     return new Promise((resolve11) => {
@@ -43656,14 +43679,18 @@ var StreamingState = class {
             `permission ${args2.questionId.slice(0, 8)} TTL expired \u2014 auto-cancel`
           );
           this.pending = null;
+          void this.publisher.publishOutput({
+            type: "text",
+            content: permissionExpiredNotice(),
+            done: true
+          });
           resolve11({ outcome: { outcome: "cancelled" } });
         }
       }, PERMISSION_TIMEOUT_MS);
       this.pending = {
         kind: "permission",
         questionId: args2.questionId,
-        labels: args2.labels,
-        optionIdByLabel: args2.optionIdByLabel,
+        options: args2.options,
         resolve: resolve11,
         timeoutTimer
       };
@@ -43683,28 +43710,33 @@ var StreamingState = class {
    * routing instruction the runner uses to drive the next ACP RPC:
    *
    *   - 'resolved' — permission Promise resolved; SDK is unblocked
-   *     and the runner just acks the relay command.
+   *     and the runner just acks the relay command. `optionId` is
+   *     what was answered (null = cancelled).
    *   - 'reprompt' — free-form selection; the runner must call
    *     `client.prompt(text)` with the returned text to send the
    *     user's pick to the adapter as a new turn.
    *   - 'none' — nothing pending; the runner acks the command as
    *     failed so mobile shows a stale-question affordance.
+   *
+   * For a permission, `optionId` (the wire `value` the client echoes
+   * back) wins when it names one of the registered options; otherwise
+   * `index` is the position in the options we put on the wire.
    */
-  resolveSelection(index) {
+  resolveSelection(index, optionId) {
     if (!this.pending) return { kind: "none" };
     if (this.pending.kind === "permission") {
-      const label = this.pending.labels[index];
-      const optionId = label ? this.pending.optionIdByLabel[label] : void 0;
+      const byId = optionId ? this.pending.options.find((o) => o.optionId === optionId) : void 0;
+      const picked = byId ?? this.pending.options[index];
       clearTimeout(this.pending.timeoutTimer);
       const resolve11 = this.pending.resolve;
       this.pending = null;
-      if (!optionId) {
+      if (!picked) {
         log.warn("acpRunner", `select_option index=${index} out of bounds \u2014 cancel`);
         resolve11({ outcome: { outcome: "cancelled" } });
-        return { kind: "resolved" };
+        return { kind: "resolved", optionId: null };
       }
-      resolve11({ outcome: { outcome: "selected", optionId } });
-      return { kind: "resolved" };
+      resolve11({ outcome: { outcome: "selected", optionId: picked.optionId } });
+      return { kind: "resolved", optionId: picked.optionId };
     }
     const text = this.pending.options[index];
     this.pending = null;
@@ -43968,6 +44000,10 @@ var StreamingState = class {
   }
 };
 var PERMISSION_TIMEOUT_MS = 5 * 60 * 1e3;
+function permissionExpiredNotice() {
+  const minutes = Math.round(PERMISSION_TIMEOUT_MS / 6e4);
+  return `\u23F1 A permission request expired after ${minutes} minutes with no answer, so CodeAgent cancelled it \u2014 this was a timeout, not a refusal by you. Ask the agent to try again and approve it from here.`;
+}
 var AcpHistory = class {
   constructor(publisher, opts) {
     this.publisher = publisher;
@@ -46604,13 +46640,9 @@ async function runBatonSession(opts) {
     beginLoadReplay: () => streaming.beginLoadReplay(),
     endLoadReplay: () => streaming.endLoadReplay(),
     onRequestPermission: async (request2) => {
-      const { event, optionIdByLabel } = mapPermissionRequest(request2);
+      const { event, options } = mapPermissionRequest(request2);
       await publisher.publishAwaitingAnswer(event);
-      return streaming.registerPermission({
-        questionId: event.questionId,
-        labels: event.options ?? [],
-        optionIdByLabel
-      });
+      return streaming.registerPermission({ questionId: event.questionId, options });
     },
     onStderr: (line) => {
       recentStderr.push(line);
@@ -49825,7 +49857,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.74.13" : "0.0.0-dev";
+  const cliVersion = true ? "2.74.14" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50349,7 +50381,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.74.13" : "unknown";
+  const v = true ? "2.74.14" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.74.13",
+  "version": "2.74.14",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",