codeam-cli 2.75.9 → 2.75.11

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.10] — 2026-09-23
+
+### Fixed
+
+- **cli:** Guardrails judge a write by its target; pack stage shows a mid-turn permission as awaiting
+
+## [2.75.9] — 2026-09-23
+
+### Added
+
+- **cli:** Agent packs — structured Reviewer findings, in-place resume, rehydration after restart
+
 ## [2.75.8] — 2026-09-23
 
 ### Fixed

package/dist/index.js

@@ -10509,7 +10509,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.9" : "0.0.0-dev",
+    cliVersion: true ? "2.75.11" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10751,7 +10751,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.9",
+  version: "2.75.11",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12081,7 +12081,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.9" ? { ideVersion: "2.75.9" } : {}
+      ..."2.75.11" ? { ideVersion: "2.75.11" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -33795,7 +33795,7 @@ function internalPathPermissionOutcome(request2, homeDir2) {
 var INTERNAL_BLOCK_REASON = "This path is a CodeAgent platform internal (CodeAgent's own runtime plumbing, not part of the user's project) and is off-limits. Continue with the user's own project files.";
 
 // src/agents/acp/guardrails.ts
-var SECRET_RE = /(^|[\s"'`=(/\\])(\.env(\.[\w.-]+)?|[\w.-]+\.(pem|key|pfx|p12|jks|keystore)|id_rsa|id_ed25519|\.npmrc|\.pgpass|\.netrc|\.git-credentials|kubeconfig|credentials(\.[\w-]+)?)\b/i;
+var SECRET_RE = /(^|[\s"'`=(/\\])(\.env(\.[\w.-]+)?|[\w.-]+\.(pem|key|pfx|p12|jks|keystore)|id_rsa|id_ed25519|\.npmrc|\.pgpass|\.netrc|\.git-credentials|kubeconfig|\.credentials(\.[\w-]+)?)\b|[/\\]credentials(\.[\w-]+)?\b/i;
 var DESTRUCTIVE_RES = [
   /\brm\s+-[a-z]*f/i,
   // rm -rf / -fr / -f
@@ -33821,6 +33821,15 @@ var OUTWARD_RES = [
   /\bnetlify\s+deploy\b/i,
   /\beas\s+(submit|build)\b/i
 ];
+function editTargetHaystack(call) {
+  const parts = [typeof call.title === "string" ? call.title : ""];
+  if (call.rawInput && typeof call.rawInput === "object" && !Array.isArray(call.rawInput)) {
+    for (const [key, value] of Object.entries(call.rawInput)) {
+      if (typeof value === "string" && /path|file|dest|target/i.test(key)) parts.push(value);
+    }
+  }
+  return parts.join("\n");
+}
 function haystack(call) {
   let s = typeof call.title === "string" ? call.title : "";
   if (call.rawInput != null) {
@@ -33849,7 +33858,7 @@ function toolPathIsSecret(p2) {
 var GUARDRAIL_SECRET_READ_BLOCK_REASON = "Reading this secret file is blocked by this session's guardrails (Reading secrets = Deny). Adjust it in the session Guardrails settings if intended.";
 function guardrailDecision(request2, policy) {
   if (isProseOnlyToolKind(request2.toolCall.kind)) return null;
-  const hay = haystack(request2.toolCall);
+  const hay = request2.toolCall.kind === "edit" ? editTargetHaystack(request2.toolCall) : haystack(request2.toolCall);
   if (!hay) return null;
   const matched = matchedCategories(hay);
   if (matched.size === 0) return null;
@@ -33873,7 +33882,11 @@ function guardrailDecision(request2, policy) {
     };
   }
   if (confirmCat) {
-    return { kind: "confirm", category: confirmCat, reason: GUARDRAIL_CATEGORY_META[confirmCat].description };
+    return {
+      kind: "confirm",
+      category: confirmCat,
+      reason: GUARDRAIL_CATEGORY_META[confirmCat].description
+    };
   }
   return null;
 }
@@ -35563,6 +35576,18 @@ function _get(url2, headers) {
 }
 
 // src/agents/acp/publisher.ts
+var STREAMING_CHUNK_SNAPSHOT_MAX_CHARS = 56 * 1024;
+var STREAMING_CHUNK_COALESCE_MIN_CHARS = 8 * 1024;
+var STREAMING_CHUNK_COALESCE_WINDOW_MS = 300;
+function boundStreamingChunkContent(content, max = STREAMING_CHUNK_SNAPSHOT_MAX_CHARS) {
+  if (content.length <= max) return { content, truncated: false };
+  const dropped = content.length - max;
+  return {
+    content: `${content.slice(0, max)}
+\u2026 [output truncated: ${dropped} more characters \u2014 the full text is in the conversation transcript]`,
+    truncated: true
+  };
+}
 var AcpPublisher = class {
   constructor(opts) {
     this.opts = opts;
@@ -35572,6 +35597,11 @@ var AcpPublisher = class {
   opts;
   apiBase;
   token;
+  /** chunkIds whose truncated snapshot already went out — nothing new to show
+   *  until the terminal frame. */
+  truncatedChunks = /* @__PURE__ */ new Set();
+  lastChunkPostAt = /* @__PURE__ */ new Map();
+  pendingChunkPosts = /* @__PURE__ */ new Map();
   /** Latched on an unrecoverable 401/403 — every surface stops posting
    *  (2026-06-28 incident: a dead-token publisher spammed 401 ×34 while
    *  the agent's replies silently never reached the phone). */
@@ -35600,7 +35630,10 @@ var AcpPublisher = class {
       const fresh = await this.opts.refreshAuthToken();
       if (fresh) {
         this.token = fresh;
-        log.info("acpPublisher", `plugin-auth token refreshed after ${first.statusCode}; retrying POST`);
+        log.info(
+          "acpPublisher",
+          `plugin-auth token refreshed after ${first.statusCode}; retrying POST`
+        );
         const second = await _transport4.post(url2, this.authHeaders(), payload);
         if (second.statusCode !== 401 && second.statusCode !== 403) return second;
         this.markPairingInvalid(second.statusCode);
@@ -35709,17 +35742,51 @@ var AcpPublisher = class {
    * richer SessionDetail surface.
    */
   async publishStreamingChunk(event) {
+    const { chunkId, isFinal } = event;
+    const pending = this.pendingChunkPosts.get(chunkId);
+    if (pending) {
+      clearTimeout(pending.timer);
+      this.pendingChunkPosts.delete(chunkId);
+    }
+    const bounded = boundStreamingChunkContent(event.content);
+    if (bounded.truncated) {
+      if (!isFinal && this.truncatedChunks.has(chunkId)) return;
+      if (!this.truncatedChunks.has(chunkId)) {
+        log.warn(
+          "acpPublisher",
+          `streaming-chunk ${chunkId.slice(0, 12)} (${event.kind}) exceeds ${STREAMING_CHUNK_SNAPSHOT_MAX_CHARS} chars \u2014 sending a truncated snapshot once`
+        );
+      }
+      this.truncatedChunks.add(chunkId);
+    }
+    if (isFinal) {
+      this.truncatedChunks.delete(chunkId);
+      this.lastChunkPostAt.delete(chunkId);
+    } else if (!bounded.truncated && bounded.content.length >= STREAMING_CHUNK_COALESCE_MIN_CHARS) {
+      const last = this.lastChunkPostAt.get(chunkId) ?? 0;
+      const wait = STREAMING_CHUNK_COALESCE_WINDOW_MS - (Date.now() - last);
+      if (wait > 0) {
+        const timer = setTimeout(() => {
+          const latest = this.pendingChunkPosts.get(chunkId);
+          this.pendingChunkPosts.delete(chunkId);
+          if (latest) void this.postStreamingChunk(latest.event);
+        }, wait);
+        this.pendingChunkPosts.set(chunkId, { timer, event });
+        return;
+      }
+    }
+    await this.postStreamingChunk({ ...event, content: bounded.content });
+  }
+  async postStreamingChunk(event) {
     const url2 = `${this.apiBase}/api/sessions/${encodeURIComponent(this.opts.sessionId)}/streaming-chunk`;
+    if (!event.isFinal) this.lastChunkPostAt.set(event.chunkId, Date.now());
     try {
       const { statusCode, body } = await this.postWithReauth(
         url2,
         this.envelope(event)
       );
       if (statusCode < 200 || statusCode >= 300) {
-        log.warn(
-          "acpPublisher",
-          `streaming-chunk status=${statusCode} body=${body.slice(0, 200)}`
-        );
+        log.warn("acpPublisher", `streaming-chunk status=${statusCode} body=${body.slice(0, 200)}`);
       }
     } catch (err) {
       log.trace("acpPublisher", "streaming-chunk post failed", err);
@@ -38054,7 +38121,7 @@ var PackRunner = class _PackRunner {
           previousAttemptError
         });
         const displayLine = `\u25B6 ${this.pack.name} \u2014 stage ${index + 1}/${this.pack.stages.length}: ${stageDef.name}`;
-        turn = await this.drive(prompt, displayLine);
+        turn = await this.drive(prompt, displayLine, index);
       }
       if (this.aborted()) {
         await this.settle("aborted");
@@ -38069,7 +38136,7 @@ var PackRunner = class _PackRunner {
           return this.recordHandoff(
             index,
             stageDef,
-            await this.noChangeHandoff(startSha, text, startedMs)
+            await this.noChangeHandoff(stageDef, startSha, text, startedMs)
           );
         }
         if (!this.state.stages[index].conversationId) {
@@ -38078,7 +38145,7 @@ var PackRunner = class _PackRunner {
             "stage produced no commit \u2014 Retry stage to run it again in a fresh conversation"
           );
         }
-        const nudged = await this.drive(NUDGE_PROMPT, "\u25B6 Waiting for the stage commit\u2026");
+        const nudged = await this.drive(NUDGE_PROMPT, "\u25B6 Waiting for the stage commit\u2026", index);
         if (this.aborted()) {
           await this.settle("aborted");
           return false;
@@ -38091,7 +38158,7 @@ var PackRunner = class _PackRunner {
             return this.recordHandoff(
               index,
               stageDef,
-              await this.noChangeHandoff(startSha, text, startedMs)
+              await this.noChangeHandoff(stageDef, startSha, text, startedMs)
             );
           }
           return this.stall(index, "stage produced no commit", text);
@@ -38123,10 +38190,13 @@ var PackRunner = class _PackRunner {
   aborted() {
     return this.control === "abort";
   }
-  async drive(prompt, displayLine) {
+  async drive(prompt, displayLine, index) {
     this.inTurn = true;
     try {
-      return await this.deps.driver.runTurn(prompt, displayLine);
+      return await this.deps.driver.runTurn(prompt, displayLine, (pending) => {
+        this.patchStage(index, { awaitingUser: pending ? true : void 0 });
+        void this.publish();
+      });
     } finally {
       this.inTurn = false;
     }
@@ -38138,13 +38208,19 @@ var PackRunner = class _PackRunner {
     if (fresh.length > 0) this.deps.driver.mountSkills(fresh);
     this.mountedSkills = next.slice();
   }
-  async noChangeHandoff(startSha, text, startedMs) {
+  async noChangeHandoff(stageDef, startSha, text, startedMs) {
     const reviewedCommit = startSha ? await this.deps.gates.canonicalCommit(startSha) : null;
     return {
       commit: reviewedCommit ?? "(no changes)",
       summary: summarizeReply(text),
       diffStat: "reviewed \u2014 no changes needed",
-      durationMs: Date.now() - startedMs
+      durationMs: Date.now() - startedMs,
+      // A findings-producing stage that hands off without a commit never
+      // wrote its findings file (its contract says: commit it even when
+      // empty). Say so — the next stage must not assume a clean bill.
+      ...stageDef.producesFindings ? {
+        findingsNote: `no ${PACK_FINDINGS_FILE} committed \u2014 the stage handed off without structured findings`
+      } : {}
     };
   }
   /**
@@ -38253,15 +38329,20 @@ function buildPackRunnerDeps(ctx) {
         ctx.onActiveSessionChanged?.(id);
         return id;
       },
-      runTurn: async (prompt, displayLine) => {
+      runTurn: async (prompt, displayLine, onAwaiting) => {
         await ctx.streaming.beginTurn();
         ctx.history.appendUserPrompt(displayLine);
-        await ctx.client.prompt(prompt);
-        const text = ctx.streaming.getCurrentText();
-        const awaitingUser = await ctx.streaming.closeTurnWithInteractiveDetection();
-        ctx.history.appendAgentReply(text);
-        await ctx.history.flush();
-        return { text, awaitingUser };
+        ctx.streaming.setPendingListener(onAwaiting ?? null);
+        try {
+          await ctx.client.prompt(prompt);
+          const text = ctx.streaming.getCurrentText();
+          const awaitingUser = await ctx.streaming.closeTurnWithInteractiveDetection();
+          ctx.history.appendAgentReply(text);
+          await ctx.history.flush();
+          return { text, awaitingUser };
+        } finally {
+          ctx.streaming.setPendingListener(null);
+        }
       },
       cancel: () => ctx.client.cancel(),
       mountSkills: (skillIds) => {
@@ -40064,6 +40145,25 @@ var StreamingState = class {
    */
   text = "";
   pending = null;
+  /** Observer for "is a question pending?" flips. The Agent Packs runner marks
+   *  its stage `awaitingUser` while a permission prompt waits on the user
+   *  MID-turn, instead of a stage that looks silently "working" for the 5-min
+   *  permission TTL (live run 2026-09-23). Never throws into the turn. */
+  pendingListener = null;
+  setPendingListener(listener) {
+    this.pendingListener = listener;
+  }
+  setPending(next) {
+    const was = this.pending !== null;
+    this.pending = next;
+    const is = next !== null;
+    if (was !== is) {
+      try {
+        this.pendingListener?.(is);
+      } catch {
+      }
+    }
+  }
   /**
    * While true, {@link append} drops incoming session/update deltas instead of
    * publishing them. Used by the baton {@link AcpDriver} to swallow the
@@ -40166,7 +40266,7 @@ var StreamingState = class {
             "acpRunner",
             `permission ${args2.questionId.slice(0, 8)} TTL expired \u2014 auto-cancel`
           );
-          this.pending = null;
+          this.setPending(null);
           void this.publisher.publishOutput({
             type: "text",
             content: permissionExpiredNotice(),
@@ -40175,13 +40275,13 @@ var StreamingState = class {
           resolve11({ outcome: { outcome: "cancelled" } });
         }
       }, PERMISSION_TIMEOUT_MS);
-      this.pending = {
+      this.setPending({
         kind: "permission",
         questionId: args2.questionId,
         options: args2.options,
         resolve: resolve11,
         timeoutTimer
-      };
+      });
     });
   }
   /**
@@ -40190,7 +40290,7 @@ var StreamingState = class {
    * `resolveSelection()` (user picked).
    */
   registerFreeformOptions(options) {
-    this.pending = { kind: "free-form", options };
+    this.setPending({ kind: "free-form", options });
   }
   /**
    * Apply a `select_option` command (delivered via the CLI's SSE
@@ -40217,7 +40317,7 @@ var StreamingState = class {
       const picked = byId ?? this.pending.options[index];
       clearTimeout(this.pending.timeoutTimer);
       const resolve11 = this.pending.resolve;
-      this.pending = null;
+      this.setPending(null);
       if (!picked) {
         log.warn("acpRunner", `select_option index=${index} out of bounds \u2014 cancel`);
         resolve11({ outcome: { outcome: "cancelled" } });
@@ -40227,7 +40327,7 @@ var StreamingState = class {
       return { kind: "resolved", optionId: picked.optionId };
     }
     const text = this.pending.options[index];
-    this.pending = null;
+    this.setPending(null);
     if (!text) {
       log.warn("acpRunner", `select_option index=${index} out of bounds (free-form) \u2014 drop`);
       return { kind: "none" };
@@ -40283,7 +40383,7 @@ var StreamingState = class {
     if (this.pending?.kind === "permission") {
       clearTimeout(this.pending.timeoutTimer);
     }
-    this.pending = null;
+    this.setPending(null);
     if (opts?.clear !== false) {
       await this.publisher.publishOutput({ type: "clear" });
     }
@@ -40470,7 +40570,7 @@ var StreamingState = class {
         done: true
       });
     }
-    this.pending = { kind: "free-form", options: extracted.options };
+    this.setPending({ kind: "free-form", options: extracted.options });
     await this.publisher.publishOutput({
       type: "select_prompt",
       content: extracted.question ?? "Pick an option",
@@ -47014,7 +47114,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.9" : null;
+  const current2 = true ? "2.75.11" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47031,7 +47131,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.9" : null;
+  const current2 = true ? "2.75.11" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -47054,7 +47154,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.9" : null;
+  return true ? "2.75.11" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -48794,7 +48894,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.9" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.11" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -49318,7 +49418,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.9" : "unknown";
+  const v = true ? "2.75.11" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.9",
+  "version": "2.75.11",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",