painapple-code 1.1.0__tar.gz → 1.1.2__tar.gz

{painapple_code-1.1.0 → painapple_code-1.1.2}/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 Notable changes are documented here per release. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow [SemVer](https://semver.org/), and the git tag is the single source of truth for the version (the PyPI wheel, the Docker image tag, and `__version__` all derive from it).
 
+## 1.1.2 — 2026-09-30
+
+### Added
+
+- `pbcopy` in the built-in terminal on Linux and macOS servers: `git diff | pbcopy` copies to the clipboard of the device you're using (via OSC 52, so it needs Settings → Terminal → "Terminal apps may write to clipboard"; inside tmux also `set -g allow-passthrough on`). A server's native `pbcopy` still takes priority.
+
+### Changed
+
+- Claude Sonnet 5.5 replaces Sonnet 5 in the model catalog, and is the new default model for the shadow-git-helper subagent.
+
+## 1.1.1 — 2026-09-23
+
+### Added
+
+- Claude Opus 5.5 (1M context) in the model catalog, replacing Opus 4.8.
+
+### Fixed
+
+- Fresh installs show the real app icon — in the browser tab, on the login page and as the installed PWA/home-screen icon — instead of a generic "P" tile, and the service worker no longer fails to install from the login page.
+- `painapple setup` no longer forces a container-runtime choice: a **Skip** option (the default when nothing is configured yet) leaves the runtime and image untouched, and an existing custom runtime path is kept on Enter.
+
 ## 1.1.0 — 2026-09-08
 
 Also ships everything listed under **1.0.5** below — that tag was cut but never published.

{painapple_code-1.1.0/src/painapple_code.egg-info → painapple_code-1.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: painapple-code
-Version: 1.1.0
+Version: 1.1.2
 Summary: Self-hosted remote UI for Claude Code that journals every turn - background AI summaries become shadow-git commits and a queryable DuckDB history
 Author-email: Michał Booth-Wrotkowski <michal@boothw.com>
 License-Expression: AGPL-3.0-or-later

{painapple_code-1.1.0 → painapple_code-1.1.2}/docs-site/guides/terminal.md

@@ -59,6 +59,10 @@ With it enabled, three guardrails stay on unconditionally:
 - **Reading the clipboard is never allowed.** The OSC 52 read form is consumed and refused, so a terminal program can't see what you've copied.
 - **Reconnects never replay writes.** Scrollback replayed after a reconnect (which iPad PWAs do constantly) is stripped of clipboard sequences server-side, so an hour-old yank can't re-hijack your clipboard when a tab wakes up.
 
+### `pbcopy`
+
+Terminals on Linux and macOS servers come with a `pbcopy` that works like the macOS one, except it copies to the clipboard of the device you're using. `git diff | pbcopy`, `pbcopy < notes.txt` and `pwd | pbcopy` all work. It sends OSC 52, so it needs the setting above, and inside tmux it also needs `set -g allow-passthrough on`. It's added to the **end** of `PATH`, which means a macOS server's own `pbcopy` still takes priority. There is no `pbpaste`, because terminal programs are never allowed to read the clipboard. To paste, use Cmd/Ctrl+V.
+
 ## Logging into Claude from the terminal
 
 The Claude CLI's OAuth login is interactive, so the `/login` slash command drops you into a terminal tab pre-typed with `claude auth login` — follow the prompts there. If the CLI hits an expired or missing token mid-session, the error card in the chat includes a one-click **Login** button that opens the same terminal. `/logout` mirrors this with `claude auth logout`.

{painapple_code-1.1.0 → painapple_code-1.1.2}/docs-site/reference/profiles.md

@@ -24,7 +24,7 @@ It's the containerized twin of a bare `painapple`: the current directory (or `--
 
 ## Global defaults vs profiles
 
-`painapple setup` (no name) saves **global** defaults to `~/.painapple-code/serve.yaml`: the network bind (host/port/TLS) for a bare serve, and the container runtime for `--in-docker` — a chooser listing every runtime detected on the machine (with version and path), a custom binary path, and the image tag.
+`painapple setup` (no name) saves **global** defaults to `~/.painapple-code/serve.yaml`: the network bind (host/port/TLS) for a bare serve, and the container runtime for `--in-docker` — optional (**Skip** is the default until one is configured), a chooser listing every runtime detected on the machine (with version and path), a custom binary path, and the image tag.
 
 Workspace and cosmetics are deliberately **not** global: a bare `painapple` always serves the directory you launch it from, and a label/accent only makes sense on a named deployment. Those live in profiles.
 

{painapple_code-1.1.0 → painapple_code-1.1.2}/docs-site/reference/server-cli.md

@@ -6,7 +6,7 @@ Flags and environment variables for the default server invocation — `painapple
 
 ## Saved defaults — `painapple setup`
 
-`painapple setup` is an interactive wizard that saves **global** defaults to `~/.painapple-code/serve.yaml`: the network bind (host/port/TLS) a bare `painapple` starts with, and the container runtime + image used by [`--in-docker`](profiles.md#ad-hoc-container-mode-in-docker). Explicit flags always override the saved values. Two quick sections plus a review screen; nothing is written until you confirm.
+`painapple setup` is an interactive wizard that saves **global** defaults to `~/.painapple-code/serve.yaml`: the network bind (host/port/TLS) a bare `painapple` starts with, and — optionally, skippable if you don't use containers — the container runtime + image used by [`--in-docker`](profiles.md#ad-hoc-container-mode-in-docker). Explicit flags always override the saved values. Two quick sections plus a review screen; nothing is written until you confirm.
 
 Workspace and cosmetics are **profile-only** since the CLI unification — a bare `painapple` serves the cwd, and a label/accent belongs to a named deployment. `painapple setup NAME` creates/edits that [profile](profiles.md) instead (host or docker mode).
 

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.1.0'
-__version_tuple__ = version_tuple = (1, 1, 0)
+__version__ = version = '1.1.2'
+__version_tuple__ = version_tuple = (1, 1, 2)
 
-__commit_id__ = commit_id = 'g599bd34'
+__commit_id__ = commit_id = 'g2fe4788'

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/auth_middleware.py

@@ -103,6 +103,9 @@ PUBLIC_PATHS = frozenset({
     # the form falls back to a native GET submit and the password lands in
     # the URL instead of a POST to /api/login.
     "/static/js/login.js",
+    # Implicit browser request. /instance-icons/ is the public icon channel;
+    # this is the same file under the name the browser asks for on its own.
+    "/favicon.ico",
 })
 
 PUBLIC_PREFIXES = (

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/cli/setup_cmd.py

@@ -147,24 +147,51 @@ def step_cosmetics(cfg, back, n=3, default_label=""):
 def step_runtime(cfg, back, n=2):
     from painapple_code.cli.deploy.runtime import detect_runtimes
     _section(n, "Container runtime",
-             "Used by `painapple --in-docker` and docker-mode profiles")
+             "Optional — only used by `painapple --in-docker` and "
+             "docker-mode profiles")
     detected = detect_runtimes()
-    choices = [Choice("", "Auto", "prefer docker, fall back to podman")]
+    # "Skip" leaves runtime/image untouched rather than writing a value:
+    # a user who never types --in-docker has nothing to answer here, and
+    # one who already configured a runtime shouldn't have to re-pick it
+    # to get past the step.
+    choices = [Choice("skip", "Skip — not using containers",
+                      "leave these defaults alone"),
+               Choice("", "Auto", "prefer docker, fall back to podman")]
     for name, path, version in detected:
         choices.append(Choice(name, f"{name} {version}".strip(), path))
+
+    # A configured binary path is offered as its own row, so Enter keeps
+    # it. Defaulting to "custom" instead (as this once did) pre-armed the
+    # binary-path text prompt for anyone whose runtime came from a custom
+    # pick or the docker.yaml migration. The row is added even when the
+    # path matches a detected runtime: `podman` and `/usr/bin/podman` are
+    # different saved values (PATH lookup vs pinned binary), so collapsing
+    # them would rewrite the user's config on a plain Enter.
+    current = cfg.get("runtime") or ""
+    if current and current not in {c.value for c in choices}:
+        choices.append(Choice(current, f"Custom: {current}",
+                              "configured binary path"))
     choices.append(Choice("custom", "Custom binary path…",
                           "a docker/podman-compatible CLI"))
     if not detected:
         warn("Neither docker nor podman found on PATH — --in-docker needs "
-             "one installed (or a custom binary path).")
+             "one installed (or a custom binary path). Skip if you don't "
+             "use containers.")
 
-    current = cfg.get("runtime") or ""
+    # Nothing configured yet → land on Skip, so a user who only came for
+    # the network settings can Enter straight past. Note "" (Auto) is
+    # itself a valid choice value, so this can't be folded into a
+    # `current in known` test.
     known = {c.value for c in choices}
-    picked = ui.select("Runtime", choices,
-                       default=current if current in known else "custom",
-                       back=back)
+    if cfg.get("runtime") or cfg.get("image"):
+        default = current if current in known else ""
+    else:
+        default = "skip"
+    picked = ui.select("Runtime", choices, default=default, back=back)
     if picked is BACK:
         return BACK
+    if picked == "skip":
+        return None
     if picked == "custom":
         path = ui.text(
             "Runtime binary path (docker/podman-compatible)",

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/data/models.defaults.yaml

@@ -3,14 +3,14 @@
 # this over models.yaml. Keep in sync with the shipped models.yaml.
 
 selectable:
-- id: claude-sonnet-5
-  label: Sonnet 5
+- id: claude-sonnet-5-5
+  label: Sonnet 5.5
   desc: Balanced speed and capability
+- id: claude-opus-5-5[1m]
+  label: Opus 5.5 (1M)
+  desc: Long-running agentic coding and knowledge work
 - id: claude-opus-5[1m]
   label: Opus 5 (1M)
-  desc: Complex agentic coding and enterprise work
-- id: claude-opus-4-8[1m]
-  label: Opus 4.8 (1M)
   desc: Previous Opus tier (1M context)
 - id: claude-fable-5-1[1m]
   label: Fable 5.1

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/data/models.yaml

@@ -3,14 +3,14 @@
 # Edit via Settings → Providers, or by hand (both work).
 
 selectable:
-- id: claude-sonnet-5
-  label: Sonnet 5
+- id: claude-sonnet-5-5
+  label: Sonnet 5.5
   desc: Balanced speed and capability
+- id: claude-opus-5-5[1m]
+  label: Opus 5.5 (1M)
+  desc: Long-running agentic coding and knowledge work
 - id: claude-opus-5[1m]
   label: Opus 5 (1M)
-  desc: Complex agentic coding and enterprise work
-- id: claude-opus-4-8[1m]
-  label: Opus 4.8 (1M)
   desc: Previous Opus tier (1M context)
 - id: claude-fable-5-1[1m]
   label: Fable 5.1

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/paths.py

@@ -633,7 +633,7 @@ def save_global_config(config: dict):
 # Persisted in the global config so it survives helper reinstalls
 # (install-helpers.sh cp -f's the bundled default over the top; we re-apply this).
 HELPER_AGENT_INHERIT = "inherit"
-DEFAULT_HELPER_AGENT_MODEL = "claude-sonnet-5"
+DEFAULT_HELPER_AGENT_MODEL = "claude-sonnet-5-5"
 
 
 def get_helper_agent_options() -> list[str]:

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/server.py

@@ -1563,8 +1563,12 @@ async def service_worker():
             # module graph, so it is not covered by either arm of `shell`.
             f"/static/js/boot.js?v={version}",
             *[f"/static/{rel}?v={version}" for rel in shell],
-            "/static/icons/icon-192.png",
-            "/static/icons/icon-512.png",
+            # Public icon route, not /static/icons/ — cache.addAll() rejects
+            # the ENTIRE precache if any single entry is non-2xx, so a 401
+            # here would fail the whole service-worker install (e.g. when
+            # the SW registers from the pre-auth login page).
+            "/instance-icons/icon-192.png",
+            "/instance-icons/icon-512.png",
         ]
         # Inject version into SW
         content = (
@@ -1625,6 +1629,18 @@ async def serve_instance_icon(filename: str):
     raise HTTPException(status_code=404, detail="Icon not found")
 
 
+@app.get("/favicon.ico")
+async def serve_favicon():
+    """Root favicon, public — browsers request it implicitly.
+
+    Every HTML shell carries explicit <link rel="icon"> tags, so this is a
+    backstop for the contexts that don't consult them (bare 404 pages, some
+    feed/bookmark readers). Without it the implicit request 401s and the
+    browser caches the failure as "no icon".
+    """
+    return await serve_instance_icon("favicon.ico")
+
+
 @app.get("/manifest.json")
 async def manifest():
     """Serve PWA manifest, customized for instance identity if configured."""
@@ -1639,8 +1655,18 @@ async def manifest():
         data["name"] = f"pAInapple Code {name}"
         data["short_name"] = f"pAInapple {name}"
 
-    if _instance_icons_dir:
-        for icon in data.get("icons", []):
+    # Always point at /instance-icons/, never /static/icons/ — the manifest
+    # itself is public but /static/ is NOT, and a browser fetches manifest
+    # icons without credentials even for a logged-in user. Pointing at
+    # /static/icons/ therefore 401s on every icon and the PWA falls back to
+    # a synthesized initial-letter tile ("P"). serve_instance_icon() already
+    # falls back to the shipped artwork when no instance dir exists, so this
+    # is correct with or without --instance-name.
+    for icon in data.get("icons", []):
+        size = icon["sizes"].split("x")[0]
+        icon["src"] = f"/instance-icons/icon-{size}.png"
+    for shortcut in data.get("shortcuts", []):
+        for icon in shortcut.get("icons", []):
             size = icon["sizes"].split("x")[0]
             icon["src"] = f"/instance-icons/icon-{size}.png"
 

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/static/login.html

@@ -7,6 +7,12 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=contain">
     <meta name="theme-color" content="#0d1117">
     <title>Sign in &middot; pAInapple Code</title>
+    <!-- /instance-icons/, not /static/icons/ — this page is served pre-auth
+         and /static/ is not allowlisted. Without these the browser falls
+         back to an implicit /favicon.ico and the tab shows a blank sheet. -->
+    <link rel="icon" type="image/png" sizes="32x32" href="/instance-icons/favicon-32.png">
+    <link rel="icon" type="image/x-icon" href="/instance-icons/favicon.ico">
+    <link rel="apple-touch-icon" href="/instance-icons/apple-touch-icon.png">
     <link rel="stylesheet" href="/static/css/login.css">
 </head>
 <body>

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/static/web-client.html

@@ -25,12 +25,12 @@
     <link rel="manifest" href="/manifest.json">
 
     <!-- Favicons & Icons -->
-    <link rel="icon" type="image/png" sizes="32x32" href="/static/icons/favicon-32.png">
-    <link rel="icon" type="image/x-icon" href="/static/icons/favicon.ico">
-    <link rel="apple-touch-icon" href="/static/icons/apple-touch-icon.png">
-    <link rel="apple-touch-icon" sizes="152x152" href="/static/icons/icon-152.png">
-    <link rel="apple-touch-icon" sizes="180x180" href="/static/icons/icon-180.png">
-    <link rel="apple-touch-icon" sizes="167x167" href="/static/icons/icon-152.png">
+    <link rel="icon" type="image/png" sizes="32x32" href="/instance-icons/favicon-32.png">
+    <link rel="icon" type="image/x-icon" href="/instance-icons/favicon.ico">
+    <link rel="apple-touch-icon" href="/instance-icons/apple-touch-icon.png">
+    <link rel="apple-touch-icon" sizes="152x152" href="/instance-icons/icon-152.png">
+    <link rel="apple-touch-icon" sizes="180x180" href="/instance-icons/icon-180.png">
+    <link rel="apple-touch-icon" sizes="167x167" href="/instance-icons/icon-152.png">
 
     <!-- External Libraries (vendored via tools/package.json build pipeline) -->
     <!-- Pin marked to v4 for stable API (v5+ has breaking changes) -->

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/tools/agents/shadow-git-helper.md

@@ -1,7 +1,7 @@
 ---
 name: shadow-git-helper
 description: "Searches Shadow Git repository to find file history, changes by session, blame analysis, and code archaeology. Uses git commands on the bare repo to trace when/how/why code changed."
-model: claude-sonnet-5
+model: claude-sonnet-5-5
 ---
 
 # Shadow Git Helper - Code Archaeologist

painapple_code-1.1.2/src/painapple_code/tools/term-bin/pbcopy

@@ -0,0 +1,40 @@
+#!/bin/sh
+# pbcopy for painapple terminals — copies stdin to the BROWSER's clipboard.
+#
+# The PTY runs on the server, so a native clipboard tool (if any) would
+# write the server's clipboard, not the one on the device you're typing on.
+# Instead this emits OSC 52 (ESC ] 52 ; c ; <base64> BEL), which the
+# terminal widget turns into navigator.clipboard.writeText() — see
+# static/js/widgets/terminal/osc52.js. That handler is opt-in
+# (Settings → Terminal → "Terminal apps may write to clipboard"); when it's
+# off the widget toasts instead of copying, so a failure is never silent.
+#
+# The server APPENDS this directory to PATH, so a real pbcopy (macOS) still
+# wins. Usage mirrors macOS: `cmd | pbcopy`, `pbcopy < file`. Flags that
+# macOS pbcopy accepts (-pboard, -Prefer) are ignored.
+
+# Where the escape goes: the controlling terminal, so `pbcopy >/dev/null`
+# and redirected stdout still work. No tty → nothing can receive it.
+tty_out=/dev/tty
+if ! { true >"$tty_out"; } 2>/dev/null; then
+    echo "pbcopy: no terminal to send the clipboard escape to" >&2
+    exit 1
+fi
+
+# The widget refuses payloads over 2,000,000 base64 chars (~1.5 MB of text).
+max_bytes=1500000
+
+data=$(base64 | tr -d '\r\n')
+if [ "${#data}" -gt 2000000 ]; then
+    echo "pbcopy: input too large for the terminal clipboard (max ~$max_bytes bytes)" >&2
+    exit 1
+fi
+
+if [ -n "$TMUX" ]; then
+    # Inside tmux the outer terminal never sees an app's raw OSC 52 unless
+    # `set-clipboard on`; wrap it in DCS passthrough (tmux >= 3.3 also
+    # needs `set -g allow-passthrough on`).
+    printf '\033Ptmux;\033\033]52;c;%s\a\033\\' "$data" >"$tty_out"
+else
+    printf '\033]52;c;%s\a' "$data" >"$tty_out"
+fi

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code/utils/pty_posix.py

@@ -20,6 +20,19 @@ import termios
 
 logger = logging.getLogger(__name__)
 
+# Shims that make clipboard tools reach the BROWSER (tools/term-bin/pbcopy
+# emits OSC 52, which the terminal widget handles). Appended — never
+# prepended — to PATH, so a native pbcopy (a macOS server) still wins.
+TERM_BIN_DIR = os.path.join(os.path.dirname(os.path.dirname(os.path.abspath(__file__))), 'tools', 'term-bin')
+
+
+def with_term_bin(path: str) -> str:
+    """PATH with TERM_BIN_DIR appended once (idempotent for nested spawns)."""
+    parts = [p for p in path.split(os.pathsep) if p] if path else []
+    if TERM_BIN_DIR in parts:
+        return path
+    return os.pathsep.join(parts + [TERM_BIN_DIR])
+
 
 class PosixPty:
     """A forked shell attached to a pty master fd."""
@@ -147,6 +160,7 @@ def spawn_pty(cwd: str, rows: int = 24, cols: int = 80) -> PosixPty:
 
         os.environ['TERM'] = 'xterm-256color'
         os.environ['COLORTERM'] = 'truecolor'
+        os.environ['PATH'] = with_term_bin(os.environ.get('PATH', ''))
 
         shell = os.environ.get('SHELL', '/bin/bash')
         os.execvp(shell, [shell, '-i'])

{painapple_code-1.1.0 → painapple_code-1.1.2/src/painapple_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: painapple-code
-Version: 1.1.0
+Version: 1.1.2
 Summary: Self-hosted remote UI for Claude Code that journals every turn - background AI summaries become shadow-git commits and a queryable DuckDB history
 Author-email: Michał Booth-Wrotkowski <michal@boothw.com>
 License-Expression: AGPL-3.0-or-later

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code.egg-info/SOURCES.txt

@@ -496,6 +496,7 @@ src/painapple_code/tools/shadow-git
 src/painapple_code/tools/shadow-query
 src/painapple_code/tools/vegalite-to-svg.js
 src/painapple_code/tools/agents/shadow-git-helper.md
+src/painapple_code/tools/term-bin/pbcopy
 src/painapple_code/utils/__init__.py
 src/painapple_code/utils/agent_cli.py
 src/painapple_code/utils/bash_file_ops.py

{painapple_code-1.1.0 → painapple_code-1.1.2}/src/painapple_code.egg-info/scm_file_list.json

@@ -504,6 +504,7 @@
     "src/painapple_code/tools/install-helpers.sh",
     "src/painapple_code/tools/shadow-git",
     "src/painapple_code/tools/shadow-query",
+    "src/painapple_code/tools/term-bin/pbcopy",
     "src/painapple_code/tools/vegalite-to-svg.js",
     "src/painapple_code/turn_query.py",
     "src/painapple_code/turn_tracker.py",
@@ -633,6 +634,7 @@
     "tests/test_process_chain_collapse.py",
     "tests/test_providers.py",
     "tests/test_security_headers.py",
+    "tests/test_terminal_pbcopy.py",
     "tests/test_text_io_encoding.py",
     "tests/test_tls_cert_san.py",
     "tests/test_tls_optional.py",

painapple_code-1.1.2/src/painapple_code.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "1.1.2",
+  "distance": 0,
+  "node": "g2fe4788",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-09-30"
+}

painapple_code-1.1.0/src/painapple_code.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "1.1.0",
-  "distance": 0,
-  "node": "g599bd34",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-09-08"
-}