painapple-code 1.1.11__tar.gz → 1.2.2__tar.gz

{painapple_code-1.1.11 → painapple_code-1.2.2}/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 Notable changes are documented here per release. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow [SemVer](https://semver.org/), and the git tag is the single source of truth for the version (the PyPI wheel, the Docker image tag, and `__version__` all derive from it).
 
+## 1.2.2 — 2026-10-26
+
+### Fixed
+
+- Long Codex sessions can be resumed again. Before, resuming a large Codex thread (including via `/goal resume`) failed with "Line exceeds maximum size of 10485760 bytes", and every retry failed the same way. The resume no longer pulls the whole thread history in one message. If an oversized message ever does arrive, the session now skips it with a notice instead of ending.
+
+## 1.2.1 — 2026-10-18
+
+### Added
+
+- Settings → Providers has a new **Environment** section in each provider's panel. Use it to set extra environment variables for everything that provider's CLI runs: chat, auto-journal and the context probe. Each variable has its own enable toggle. New sessions use a change right away, and open sessions pick it up on their next message, with no server restart. Claude offers `CLAUDE_CODE_DISABLE_INLINE_SHELL_RM_PROMPT=1` as a suggested row, disabled until you tick it. Variables the app manages itself, such as the account token and `PAINAPPLE_*`, can't be overridden. Once any value is stored, the server config file becomes readable only by its owner.
+
+### Changed
+
+- When you hover a web link in chat or in a Markdown preview, the tooltip now shows the full URL.
+
+### Fixed
+
+- In YOLO mode, Claude Code CLI safety checks that need explicit approval (for example, 2.1.299+'s prompt for `bash -c` scripts that run `rm`) now show an approve/deny card. Before, they failed as "blocked by YOLO permission mode".
+
+## 1.2.0 — 2026-10-14
+
+### Added
+
+- When an enabled agent CLI is older than the version pAInapple Code needs, a popup now says so on load. It shows the installed and minimum versions and what breaks below the minimum, and has an **Update in terminal** button that runs `claude update` in a terminal tab and confirms when it's done. You can choose **Later** or **Don't show again for this version**. The same warning appears in the server log at startup and under the version line in Settings → Providers. It's also available as the "CLI Version Check" quick action.
+
+### Changed
+
+- **Requires Claude Code CLI 2.1.293 or newer** for the default auto-journal model. Older CLIs reject Haiku 5.5, and journal summaries fail until you update.
+- The auto-journal now uses Haiku 5.5 by default, replacing Haiku 4.5.
+- The model picker adds Haiku 5.5 and drops Opus 5 (Opus 5.5 remains). Sessions that had Opus 5 selected fall back to the default model.
+
 ## 1.1.11 — 2026-10-14
 
 ### Fixed

{painapple_code-1.1.11/src/painapple_code.egg-info → painapple_code-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: painapple-code
-Version: 1.1.11
+Version: 1.2.2
 Summary: Self-hosted remote UI for Claude Code that journals every turn - background AI summaries become shadow-git commits and a queryable DuckDB history
 Author-email: Michał Booth-Wrotkowski <michal@boothw.com>
 License-Expression: AGPL-3.0-or-later

{painapple_code-1.1.11 → painapple_code-1.2.2}/docs-site/getting-started/requirements.md

@@ -7,7 +7,7 @@ Here's what you need before installing pAInapple Code, and a frank note on what
 Running the server directly on a host (pip / pipx / source checkout):
 
 - **Python 3.12+**
-- **[Claude Code CLI](https://github.com/anthropics/claude-code)** installed and authenticated — either a Claude subscription (`claude login`) or an Anthropic API key
+- **[Claude Code CLI](https://github.com/anthropics/claude-code)** installed and authenticated — either a Claude subscription (`claude login`) or an Anthropic API key. **Version 2.1.293 or newer**: older CLIs don't know Haiku 5.5, the default auto-journal model. The app checks on startup and offers a one-click `claude update` when yours is behind.
 - **Git** on `PATH` — the [auto-journal](../guides/shadow-git.md) records every turn as a commit in a shadow repository, and the Git panel shells out to it for diffs. Without git the server still runs, but it journals nothing and the Git panel stays empty; you'll get a warning in the log at startup.
 - **Network access between client and server** — any modern browser works as a client
 - *Optional:* the **[OpenAI Codex CLI](https://github.com/openai/codex)** if you want sessions on the Codex [provider](../guides/providers.md) — you can even log it in from inside the app. **Codex support is experimental** — newer and less exercised than the Claude path.

{painapple_code-1.1.11 → painapple_code-1.2.2}/docs-site/guides/providers.md

@@ -61,6 +61,7 @@ While a goal exists, a **goal bar** sits above the input: status (Active, Paused
     - **Model catalog** — every model with a show/hide toggle (hidden models disappear from all pickers). Claude's catalog is fully editable (add/edit/delete, restore defaults); Codex's is read-only because the Codex CLI owns it.
     - **New Session Defaults** — that provider's default model, default effort (its own vocabulary), default permissions (its own modes — e.g. Codex Full access), and default account/token profile where applicable.
     - **Auto-journal model** — which model writes the [Shadow Git](shadow-git.md) summaries for sessions on this provider.
+    - <a id="environment"></a>**Environment** — extra environment variables for every process the provider's CLI runs (chat, auto-journal, context probe), each with an enable toggle. New sessions pick a change up immediately; open sessions restart their idle CLI on the next message — no server restart. Suggested rows ship disabled, one tick away: Claude lists `CLAUDE_CODE_DISABLE_INLINE_SHELL_RM_PROMPT=1`, which skips the approval prompt Claude Code 2.1.299+ shows for `bash -c` scripts that run `rm` it can't check (otherwise those commands stop for approval even in YOLO mode). Variables the app manages itself (the account token, `PAINAPPLE_*`) can't be overridden. Values are stored in the server config, which becomes owner-readable only once it holds any.
 
 ## Related
 

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '1.1.11'
-__version_tuple__ = version_tuple = (1, 1, 11)
+__version__ = version = '1.2.2'
+__version_tuple__ = version_tuple = (1, 2, 2)
 
-__commit_id__ = commit_id = 'ge43a938'
+__commit_id__ = commit_id = 'g155ac61'

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/data/models.defaults.yaml

@@ -9,10 +9,10 @@ selectable:
 - id: claude-opus-5-5[1m]
   label: Opus 5.5 (1M)
   desc: Long-running agentic coding and knowledge work
-- id: claude-opus-5[1m]
-  label: Opus 5 (1M)
-  desc: Previous Opus tier (1M context)
 - id: claude-fable-5-1[1m]
   label: Fable 5.1
   desc: Most capable, premium cost
-summary_model: claude-haiku-4-5
+- id: claude-haiku-5-5
+  label: Haiku 5.5
+  desc: Fastest and cheapest, 1M context
+summary_model: claude-haiku-5-5

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/data/models.yaml

@@ -9,10 +9,10 @@ selectable:
 - id: claude-opus-5-5[1m]
   label: Opus 5.5 (1M)
   desc: Long-running agentic coding and knowledge work
-- id: claude-opus-5[1m]
-  label: Opus 5 (1M)
-  desc: Previous Opus tier (1M context)
 - id: claude-fable-5-1[1m]
   label: Fable 5.1
   desc: Most capable, premium cost
-summary_model: claude-haiku-4-5
+- id: claude-haiku-5-5
+  label: Haiku 5.5
+  desc: Fastest and cheapest, 1M context
+summary_model: claude-haiku-5-5

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/data/strings.yaml

@@ -897,6 +897,7 @@ settings:
     provider_settings: "Provider Settings"
     provider_models: "Models"
     models_background: "Auto-journal Model"
+    provider_env: "Environment"
     # System tab
     sessions: "Sessions"
     permissions: "Permissions"
@@ -1098,6 +1099,7 @@ settings:
     provider_path_save: "Save"
     provider_path_reset: "Reset"
     provider_path_missing: "CLI not found"
+    provider_version_too_old: "Older than the minimum supported version {min}"
     provider_models_readonly: "Model definitions come from the provider's own CLI. Use the toggles to choose which are listed in pickers."
     provider_models_empty: "No models reported yet — run this provider's CLI once to populate its catalog."
     provider_model_toggle_title: "Show or hide this model in pickers"
@@ -1113,6 +1115,18 @@ settings:
     provider_default_permission_label: "Default permissions"
     provider_defaults_hint: "Used when a new session starts on this provider — every provider keeps its own defaults. Override per-session via the status-bar chips."
     provider_journal_hint: "Model for this provider's auto-journal fork — runs after each turn to write journal summaries, tags and decisions. Clear to use the provider's default."
+    provider_env_hint: "Extra environment variables for every process this provider's CLI runs (chat, auto-journal, context probe). Tick a row to enable it. New sessions use it right away; open sessions pick it up on their next message. Values are stored in the server config, owner-readable only."
+    provider_env_name_placeholder: "NAME"
+    provider_env_value_placeholder: "value"
+    provider_env_add_button: "Add"
+    provider_env_toggle_title: "Enable or disable this variable"
+    provider_env_delete_title: "Remove"
+    provider_env_delete_armed: "Click again to remove"
+    provider_env_suggested: "suggested"
+    provider_env_name_invalid: "Variable names use letters, digits and _ and can't start with a digit"
+    provider_env_name_dupe: "{name} is already in the list"
+    provider_env_reserved: "{name} is managed by the app and can't be set here"
+    provider_env_save_failed: "Couldn't save environment: {error}"
     thinking_hint: "Default thinking budget when creating new sessions. Can be changed per-session via the sparkle button."
     token_hint: "Generate with <code>claude setup-token</code>, save to <code>~/.config/painapple-code/tokens/&lt;name&gt;</code> (filename becomes the profile name). Can be overridden per-session."
     model_hint: "Preselects the model for new sessions on the default provider. Can be overridden per-session via the model chip in the status bar."
@@ -1794,6 +1808,7 @@ quick_actions_registry:
     settings: { label: "Settings", desc: "Open settings panel" }
     help: { label: "Help", desc: "Show keyboard shortcuts" }
     about: { label: "About", desc: "Version, license, and source code" }
+    cli_version: { label: "CLI Version Check", desc: "Check agent CLIs against the minimum supported version" }
     send_message: { label: "Send", desc: "Send message to Claude" }
     stop: { label: "Stop", desc: "Stop Claude's response" }
     scroll_bottom: { label: "Scroll Down", desc: "Jump to latest message" }
@@ -1956,6 +1971,18 @@ models:
 # Pill is always visible — clicking opens a modal that explains the
 # auto-journal feature and offers install / update / reinstall.
 # ============================================================
+cli_version:
+  title: "Agent CLI out of date"
+  heading: "{name} CLI is out of date"
+  versions: "Installed {version} · minimum supported {min}"
+  reason_prefix: "Below that,"
+  update_btn: "Update in terminal"
+  later_btn: "Later"
+  dont_show: "Don't show again for this version"
+  terminal_tab: "Update {name}"
+  updated_toast: "{name} CLI updated — all set"
+  all_ok: "All agent CLIs are up to date."
+
 helpers:
   pill:
     # The pill names the RECORDING state, not the helper-file state — a

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/paths.py

@@ -681,7 +681,7 @@ def load_models_config() -> dict:
     global _models_cache, _models_mtime
     yaml_path = PACKAGE_DIR / "data" / "models.yaml"
     if not yaml_path.exists():
-        return {"selectable": [], "summary_model": "claude-haiku-4-5"}
+        return {"selectable": [], "summary_model": "claude-haiku-5-5"}
     mtime = yaml_path.stat().st_mtime
     if mtime == _models_mtime and _models_cache:
         return _models_cache
@@ -696,7 +696,7 @@ def get_summary_model() -> str:
     """Model ID for shadow-git summary / auto-journal forks (Claude → Haiku)."""
     cfg = load_models_config()
     # Back-compat: the models.yaml key was `haiku:` before the rename.
-    return cfg.get("summary_model") or cfg.get("haiku") or "claude-haiku-4-5"
+    return cfg.get("summary_model") or cfg.get("haiku") or "claude-haiku-5-5"
 
 
 def get_selectable_models() -> list:
@@ -708,7 +708,7 @@ def get_default_models_config() -> dict:
     """Load the pristine default model list from models.defaults.yaml."""
     yaml_path = PACKAGE_DIR / "data" / "models.defaults.yaml"
     if not yaml_path.exists():
-        return {"selectable": [], "summary_model": "claude-haiku-4-5"}
+        return {"selectable": [], "summary_model": "claude-haiku-5-5"}
     import yaml
     with open(yaml_path, encoding="utf-8") as f:
         return yaml.safe_load(f) or {}

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/__init__.py

@@ -208,6 +208,44 @@ def all_providers() -> list[Provider]:
     return list(_PROVIDERS.values())
 
 
+def stale_cli_versions(enabled: dict) -> list[dict]:
+    """Enabled+available providers whose CLI is below its `min_cli_version`.
+
+    `enabled` is ``dependencies.provider_enabled_map(app)``. Blocking — probes
+    `<cli> --version` per candidate; call off the event loop. Each entry is
+    ``{provider, display_name, version, min_version, reason, upgrade_hint,
+    update_command}`` (`update_command` = shell-quoted binary + the
+    provider's `cli_update_args`, or None).
+    """
+    from painapple_code.utils.proc import shell_join
+    out = []
+    for p in all_providers():
+        if not p.min_cli_version or not enabled.get(p.name):
+            continue
+        if not p.is_available()[0]:
+            continue
+        version = p.cli_version()
+        status = p.cli_version_status(version)
+        if status["version_ok"]:
+            continue
+        update = None
+        if p.cli_update_args:
+            try:
+                update = shell_join([p.binary(), *p.cli_update_args])
+            except Exception:
+                update = None
+        out.append({
+            "provider": p.name,
+            "display_name": p.display_name,
+            "version": version,
+            "min_version": p.min_cli_version,
+            "reason": status["reason"],
+            "upgrade_hint": status["upgrade_hint"],
+            "update_command": update,
+        })
+    return out
+
+
 def valid_permission_values() -> set[str]:
     """Every permission value any provider accepts — the union of every
     provider's registered ``permission_modes()`` (Claude included; it's just

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/base.py

@@ -19,6 +19,7 @@ so a single provider instance can be shared across all sessions.
 from __future__ import annotations
 
 import json
+import os
 from abc import ABC, abstractmethod
 from dataclasses import dataclass, field
 from enum import Enum
@@ -178,6 +179,14 @@ class PluginBackend:
     marketplace_root: Optional[object] = None  # Path for component inventory; None → skip
 
 
+def _parse_version(text: Optional[str]) -> Optional[tuple]:
+    """First dotted number in `text` as an int tuple ("2.1.293 (Claude Code)"
+    → (2, 1, 293)); None when there isn't one."""
+    import re
+    m = re.search(r"\d+(?:\.\d+)+", text or "")
+    return tuple(int(x) for x in m.group(0).split(".")) if m else None
+
+
 class StderrClass(str, Enum):
     """Classification of a single stderr line. The session layer applies its
     own state gates (retry budget, etc.) on top of this pure-text verdict."""
@@ -213,6 +222,20 @@ class Provider(ABC):
     # same binary), so the setting edits the provider, not the driver.
     path_config_key: Optional[str] = None
     default_binary: str = ""
+    # Oldest CLI release this provider is known to work with. Checked (never
+    # enforced) at startup and in the Settings version row: an older CLI still
+    # launches, but a feature that needs the newer one fails — usually quietly,
+    # e.g. a default model the CLI rejects as unrecognized. None → no floor.
+    # `min_cli_version_reason` says what breaks below it; `cli_upgrade_hint` how
+    # to fix it. Compared numerically on the first dotted number in
+    # `<binary> --version` output; an unparseable version never warns.
+    min_cli_version: Optional[str] = None
+    min_cli_version_reason: str = ""
+    cli_upgrade_hint: str = ""
+    # The CLI's own self-update verb, appended to the binary (["update"] →
+    # `claude update`). The out-of-date popup runs it in a terminal tab; None
+    # → no one-click update, the popup shows `cli_upgrade_hint` only.
+    cli_update_args: Optional[list] = None
     # Copy-paste CLI hint for the "Continue in CLI" quick action: a shell
     # command template that resumes a session by id ("{id}" placeholder). Self-
     # described so the client never hardcodes a provider's resume verb (Claude
@@ -252,6 +275,16 @@ class Provider(ABC):
     # means for this provider (e.g. Codex inherits the session's model).
     summary_model_config_key: Optional[str] = None
     summary_model_placeholder: str = ""
+    # Extra environment for every CLI process this provider spawns (chat,
+    # summary fork, /context probe) — Settings → Providers → Environment.
+    # Stored in the global config's `provider_env` map under `models_key`
+    # (driver pairs share one CLI, so they share its env). `suggested_env`
+    # lists known knobs the panel offers as ready-made rows, DISABLED until
+    # the user ticks them: ``{"name", "value", "desc"}``. `reserved_env`
+    # names this provider's CLI that the app itself owns (e.g. the token
+    # profile's OAuth variable) — the user can't override those.
+    suggested_env: tuple = ()
+    reserved_env: frozenset = frozenset()
     capabilities: Capabilities = Capabilities()
 
     # --- launch -----------------------------------------------------------
@@ -526,6 +559,49 @@ class Provider(ABC):
             return False, f"{binary} not found on PATH"
         return True, None
 
+    def cli_version(self, resolved: Optional[str] = None, timeout: float = 5) -> Optional[str]:
+        """Raw `<binary> --version` output (stripped), or None if it can't run.
+
+        Blocking — callers on the event loop wrap it in ``asyncio.to_thread``.
+        `resolved` is a full path when the caller already resolved one (on
+        win32 a bare npm-shim name isn't spawnable, the shutil.which path is).
+        """
+        import shutil
+        import subprocess
+        from pathlib import Path
+        if resolved is None:
+            try:
+                binary = self.binary()
+            except Exception:
+                return None
+            resolved = binary if Path(binary).is_absolute() else shutil.which(binary)
+        if not resolved:
+            return None
+        try:
+            result = subprocess.run(
+                [resolved, "--version"], capture_output=True, text=True,
+                encoding="utf-8", errors="replace", timeout=timeout)
+        except Exception:
+            return None
+        return result.stdout.strip() if result.returncode == 0 else None
+
+    def cli_version_status(self, version_text: Optional[str]) -> dict:
+        """Compare probed `--version` output against `min_cli_version`.
+
+        ``{min_version, version_ok, reason, upgrade_hint}`` — ``version_ok`` is
+        False only when both sides parse and the CLI is older; no floor, no
+        probe, or an unparseable version all count as OK (never cry wolf).
+        """
+        found = _parse_version(version_text)
+        floor = _parse_version(self.min_cli_version)
+        ok = not (found and floor and found < floor)
+        return {
+            "min_version": self.min_cli_version,
+            "version_ok": ok,
+            "reason": None if ok else (self.min_cli_version_reason or None),
+            "upgrade_hint": None if ok else (self.cli_upgrade_hint or None),
+        }
+
     def parse_auth_status(self, returncode: int, stdout: str, stderr: str) -> dict:
         """Interpret the `auth_status_args` probe → ``{logged_in, detail}``.
 
@@ -615,6 +691,69 @@ class Provider(ABC):
             return self.models()
         return [m for m in self.models() if m.get("id") not in disabled]
 
+    # --- environment overrides (Settings → Providers → Environment) ----------
+
+    @property
+    def env_key(self) -> str:
+        """Namespace in the `provider_env` config map (shared by driver pairs)."""
+        return self.models_key or self.name
+
+    def env_reserved(self, name: str) -> bool:
+        """True when `name` is app-owned and can't be set by the user."""
+        return name.upper().startswith("PAINAPPLE_") or name in self.reserved_env
+
+    def env_entries(self) -> list[dict]:
+        """Stored env rows + not-yet-stored suggestions (disabled), in order.
+
+        Each row: ``{name, value, enabled, suggested, desc}``. A stored row
+        whose name matches a suggestion keeps the suggestion's description, so
+        a ticked suggestion still explains itself.
+        """
+        from painapple_code import paths
+        raw = (paths.load_global_config().get("provider_env") or {}).get(self.env_key)
+        suggestions = {s["name"]: s for s in self.suggested_env}
+        rows, seen = [], set()
+        for e in raw if isinstance(raw, list) else []:
+            if not isinstance(e, dict) or not isinstance(e.get("name"), str):
+                continue
+            name = e["name"]
+            if name in seen:
+                continue
+            seen.add(name)
+            s = suggestions.get(name)
+            rows.append({
+                "name": name,
+                "value": str(e.get("value") or ""),
+                "enabled": bool(e.get("enabled")),
+                "suggested": s is not None,
+                "desc": s.get("desc", "") if s else "",
+            })
+        for name, s in suggestions.items():
+            if name not in seen:
+                rows.append({"name": name, "value": s.get("value", ""),
+                             "enabled": False, "suggested": True,
+                             "desc": s.get("desc", "")})
+        return rows
+
+    def env_overrides(self) -> dict:
+        """The enabled, non-reserved rows as a ``{name: value}`` dict."""
+        return {e["name"]: e["value"] for e in self.env_entries()
+                if e["enabled"] and not self.env_reserved(e["name"])}
+
+    def apply_env(self, base: Optional[dict]) -> Optional[dict]:
+        """Layer `env_overrides()` onto a spawn env.
+
+        `base` follows the spawners' convention: None = inherit the server's
+        environment. Returns None again when there's nothing to add, so the
+        no-override path is byte-for-byte what it was.
+        """
+        overrides = self.env_overrides()
+        if not overrides:
+            return base
+        env = dict(base) if base is not None else os.environ.copy()
+        env.update(overrides)
+        return env
+
     def effort_levels(self) -> list[str]:
         """Effort levels this provider meaningfully distinguishes, low→high.
 

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/claude/capabilities.py

@@ -36,6 +36,31 @@ class _CapabilitiesMixin:
     # paste-back code, which works fine inside a PTY terminal tab.
     auth_status_args = ["auth", "status", "--json"]
     auth_login_args = ["auth", "login"]
+    # 2.1.293 is the first CLI that knows claude-haiku-5-5 (bisected: 2.1.292
+    # rejects it as unrecognized_model) — the shipped auto-journal default.
+    # npm's `stable` dist-tag lagged behind it at release, hence `@latest`.
+    min_cli_version = "2.1.293"
+    min_cli_version_reason = (
+        "it doesn't know Haiku 5.5, the default auto-journal model, so journal "
+        "summaries fail")
+    cli_upgrade_hint = (
+        "Run `claude update` or `npm install -g @anthropic-ai/claude-code@latest` "
+        "(no server restart needed — every fork spawns the CLI fresh).")
+    cli_update_args = ["update"]
+    # Settings → Providers → Environment. The token profile owns the OAuth
+    # variable; CLAUDECODE is stripped on purpose (nested-session guard).
+    reserved_env = frozenset({"CLAUDE_CODE_OAUTH_TOKEN", "CLAUDECODE"})
+    suggested_env = (
+        {
+            "name": "CLAUDE_CODE_DISABLE_INLINE_SHELL_RM_PROMPT",
+            "value": "1",
+            # CLI 2.1.29x asks before running a `bash -c` script whose rm
+            # targets it can't analyse — an ask YOLO can't auto-allow.
+            "desc": ("Skip the CLI's approval prompt for `bash -c` scripts that "
+                     "run rm it can't check (CLI 2.1.299+). Without it, those "
+                     "commands stop for approval even in YOLO mode."),
+        },
+    )
 
     def binary(self) -> str:
         return get_claude_binary()
@@ -60,7 +85,7 @@ class _CapabilitiesMixin:
         from painapple_code import paths
         cleaned = (value or "").strip() or (
             paths.get_default_models_config().get("summary_model")
-            or "claude-haiku-4-5")
+            or "claude-haiku-5-5")
         paths.save_models_config({
             "selectable": paths.get_selectable_models(),
             "summary_model": cleaned,
@@ -135,6 +160,7 @@ class _CapabilitiesMixin:
             provider_session_id=session_id,
             token_profile=token_profile,
             model=model,
+            provider=self,
         )
 
     # --- customization roots (skills / agents / plugins) ------------------

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/claude/summary.py

@@ -41,8 +41,9 @@ class _SummaryMixin:
         from painapple_code.paths import get_summary_model
         from painapple_code.utils.token_profiles import build_env as build_token_env
 
-        # Always plain haiku — the [1m] variant hangs with --fork-session from
-        # opus[1m] sessions (every fork times out at 300s even for 30k context).
+        # Never a `[1m]`-suffixed id — that variant hung with --fork-session from
+        # opus[1m] sessions (every fork timed out at 300s even for 30k context).
+        # Haiku 5.5 is 1M-context natively, so the plain id needs no suffix.
         summary_model = get_summary_model()
         return SummaryForkPlan(
             argv=[

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/claude_sdk/driver.py

@@ -175,12 +175,24 @@ async def _amain(args: argparse.Namespace) -> int:
             interrupt=bool(resp.get("interrupt")),
         )
 
-    # bypassPermissions (YOLO) auto-approves every tool call before can_use_tool
-    # is ever consulted, so wiring the callback does nothing except trip the
-    # SDK's CanUseToolShadowedWarning — which the server's stderr reader surfaces
-    # as a scary (but harmless) error line. Only attach the permission gate for
-    # modes that can actually prompt.
-    gate = None if args.permission_mode == "bypassPermissions" else on_permission
+    # The gate is attached in EVERY mode, bypassPermissions (YOLO) included.
+    # Bypass auto-approves ordinary tool calls before can_use_tool is
+    # consulted, but CLI safety checks can still return "ask" decisions that
+    # no mode can auto-allow — e.g. 2.1.29x's dangerous-rm check on an
+    # uncheckable `bash -c` script ("requires explicit approval and cannot be
+    # auto-allowed"). With no gate attached, the headless CLI resolves such an
+    # ask as a denial, so YOLO sessions saw tool calls "blocked by YOLO
+    # permission mode". With the gate, the ask becomes an approve/deny card.
+    # The SDK warns (CanUseToolShadowedWarning) that bypass shadows the
+    # callback; that's expected here and the server's stderr reader would
+    # surface it as an error line, so silence it.
+    if args.permission_mode == "bypassPermissions":
+        import warnings
+        import claude_agent_sdk
+        shadowed = getattr(claude_agent_sdk, "CanUseToolShadowedWarning", None)
+        if shadowed is not None:
+            warnings.filterwarnings("ignore", category=shadowed)
+    gate = on_permission
 
     options = ClaudeAgentOptions(
         can_use_tool=gate,
@@ -231,11 +243,9 @@ async def _amain(args: argparse.Namespace) -> int:
     # `permission_prompt_tool_name="stdio"` injection (it only applies it to
     # the transport it would have built itself), so set it on the *transport's*
     # options copy here. It must NOT go on the client's options — the client
-    # rejects it alongside `can_use_tool`. Pair it with the gate: in bypass mode
-    # there's nothing to route to stdio, so keep that path a clean pass-through.
-    transport_opts = dataclasses.replace(options, can_use_tool=None)
-    if gate is not None:
-        transport_opts = dataclasses.replace(transport_opts, permission_prompt_tool_name="stdio")
+    # rejects it alongside `can_use_tool`.
+    transport_opts = dataclasses.replace(
+        options, can_use_tool=None, permission_prompt_tool_name="stdio")
     transport = _make_tee_transport(transport_opts)
     client = ClaudeSDKClient(options=options, transport=transport)
     try:

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/codex_app_server/launch.py

@@ -89,6 +89,12 @@ class _LaunchMixin:
             "cwd": cwd,
             "sandbox": _SANDBOX_BY_MODE.get(opts.permission_mode or "", _DEFAULT_SANDBOX),
             "approvalPolicy": "never",
+            # Without it the RESPONSE carries the whole thread history
+            # (thread.turns with every item) on ONE stdout line — a long
+            # thread blew past the reader's 10 MiB line cap and killed the
+            # session on resume. The transport never reads those turns; the
+            # model context is unaffected.
+            "excludeTurns": True,
         }
         model = self._wire_model(opts.model)
         if model:
@@ -113,6 +119,9 @@ class _LaunchMixin:
             "cwd": cwd,
             "sandbox": _SANDBOX_BY_MODE.get(opts.permission_mode or "", _DEFAULT_SANDBOX),
             "approvalPolicy": "never",
+            # Same reason as thread_resume_params: keep the full history out
+            # of the single-line response. The fork still carries it.
+            "excludeTurns": True,
         }
         model = self._wire_model(opts.model)
         if model:

{painapple_code-1.1.11 → painapple_code-1.2.2}/src/painapple_code/providers/codex_app_server/transport.py

@@ -206,6 +206,9 @@ class JsonRpcTransport:
         try:
             await self._request("initialize", {
                 "clientInfo": {"name": "painapple-code", "version": _client_version()},
+                # Required for `excludeTurns` on thread/resume + thread/fork
+                # (0.144 rejects the field without this opt-in).
+                "capabilities": {"experimentalApi": True},
             })
             await self._notify("initialized")
             self._initialized = True