codeam-cli 2.75.19 → 2.75.21

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.20] — 2026-09-25
+
+### Fixed
+
+- **cli:** Preview heals a committed host-allow shim instead of wrapping it
+
+## [2.75.19] — 2026-09-25
+
+### Fixed
+
+- **cli:** Authenticate gh on self-hosted boxes with a token lacking read:org
+
 ## [2.75.18] — 2026-09-25
 
 ### Fixed

package/dist/index.js

@@ -10509,7 +10509,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.19" : "0.0.0-dev",
+    cliVersion: true ? "2.75.21" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10751,7 +10751,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.19",
+  version: "2.75.21",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12081,7 +12081,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.19" ? { ideVersion: "2.75.19" } : {}
+      ..."2.75.21" ? { ideVersion: "2.75.21" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -22784,6 +22784,14 @@ module.exports = { server: { allowedHosts: ${list} } };
 function shimFor(framework, origBasename, esm) {
   return framework === "next" ? nextShim(origBasename, esm) : viteShim(origBasename, esm);
 }
+var SHIM_HEADER = "// codeam preview host-allow shim";
+async function isOurShim(abs) {
+  try {
+    return (await import_fs2.promises.readFile(abs, "utf8")).startsWith(SHIM_HEADER);
+  } catch {
+    return false;
+  }
+}
 async function writeMarker(cwd, marker) {
   await import_fs2.promises.mkdir(path41.join(cwd, MARKER_DIR), { recursive: true });
   await import_fs2.promises.writeFile(markerPath(cwd), JSON.stringify(marker, null, 2), "utf8");
@@ -22837,6 +22845,16 @@ async function applyPreviewHostAllow(cwd) {
     if (existing) {
       const ext = path41.extname(existing);
       const origBasename = `${CONFIG_BASENAMES[framework]}${ORIG_INFIX}${ext}`;
+      if (await isOurShim(path41.join(cwd, existing))) {
+        const origAbs = path41.join(cwd, origBasename);
+        if (!await fileExists(origAbs) || await isOurShim(origAbs)) {
+          log.warn("preview", `host-allow: ${existing} is a leftover shim with no original \u2014 skipped`);
+          return;
+        }
+        await import_fs2.promises.rm(path41.join(cwd, existing), { force: true });
+        await import_fs2.promises.rename(origAbs, path41.join(cwd, existing));
+        log.info("preview", `host-allow: restored ${existing} from a leftover ${origBasename}`);
+      }
       const esm = await isEsmConfig(cwd, existing);
       await import_fs2.promises.rename(path41.join(cwd, existing), path41.join(cwd, origBasename));
       await import_fs2.promises.writeFile(path41.join(cwd, existing), shimFor(framework, origBasename, esm), "utf8");
@@ -36693,11 +36711,30 @@ var import_node_crypto9 = require("crypto");
 var BD_PRIME_COMMAND_RE = /(?:^|[;&|]\s*)bd\s+prime\b/;
 var ToolCallTracker = class {
   bdPrimeIds = /* @__PURE__ */ new Set();
+  /** Latest non-empty title per open call — see {@link lastTitle}. */
+  titles = /* @__PURE__ */ new Map();
   /** Record a `tool_call` so its later `tool_call_update` can be recognised. */
   note(update) {
-    if (update.sessionUpdate !== "tool_call" || !update.toolCallId) return;
+    if (!update.toolCallId) return;
+    if (update.sessionUpdate !== "tool_call" && update.sessionUpdate !== "tool_call_update") return;
+    const title = update.title?.trim();
+    if (title) this.titles.set(update.toolCallId, title);
+    if (update.sessionUpdate !== "tool_call") return;
     if (isBdPrimeInvocation(update)) this.bdPrimeIds.add(update.toolCallId);
   }
+  /**
+   * The call's most recent title, forgotten once read. claude-agent-acp opens
+   * a Write as "Preparing file…", renames it in a non-terminal update
+   * ("Write FOO.md"), then completes it with NO content and an EMPTY title —
+   * the completion mapped to nothing and the phone showed "Preparing file…"
+   * pending forever (break-it 2026-09-24, fleet box).
+   */
+  lastTitle(toolCallId) {
+    if (!toolCallId) return null;
+    const title = this.titles.get(toolCallId) ?? null;
+    this.titles.delete(toolCallId);
+    return title;
+  }
   /** True when this tool call was `bd prime`; forgets terminal ids. */
   isBdPrime(toolCallId, terminal) {
     if (!toolCallId) return false;
@@ -36745,7 +36782,8 @@ function mapSessionUpdate(notification, tracker) {
       if (update.status !== "completed" && update.status !== "failed") {
         return [];
       }
-      const rawBody = describeToolCallUpdate(update);
+      const remembered = tracker?.lastTitle(update.toolCallId) ?? null;
+      const rawBody = describeToolCallUpdate(update) ?? remembered;
       if (!rawBody) return [];
       const body = update.status === "completed" && tracker?.isBdPrime(update.toolCallId, true) ? bdPrimeResultSummary(rawBody) : rawBody;
       const prefix = update.status === "failed" ? "[failed] " : "";
@@ -47680,7 +47718,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.19" : null;
+  const current2 = true ? "2.75.21" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47697,7 +47735,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.19" : null;
+  const current2 = true ? "2.75.21" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47720,7 +47758,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.19" : null;
+  return true ? "2.75.21" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -49606,7 +49644,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.19" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.21" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -50130,7 +50168,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.19" : "unknown";
+  const v = true ? "2.75.21" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.19",
+  "version": "2.75.21",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",