CloudCLI UI v1.39.0

1.39.0 (2026-10-07)

New Features

• AC-234: record a run's source from caller.via, add mcp to ChatRunSource (6588622)
• AC-235: address runs by runId — runsById summaries, aborted status, injectable retention/clock (663ece7)
• activity-dock: AC-190 人工关卡 —— 记录小节 + 只读取证脚本 + 护栏判据 (ce37f20)
• activity-dock: stop a task and background a foreground tool from the dock (AC-199) (d544ce2)
• chat: chat.background-task control verb addressing the Turn Tracker (AC-197) (cbc6e10)
• chat: chat.stop-task control verb with event-driven confirmation (33771d5)
• chat: collapse control-verb ownership onto one entry, rework cancel-queued (6c5d766)
• chat: draw the turn's status in the message flow at every viewport (7fd3598)
• chat: execute ui.navigate by this device's policy (bd2170a)
• chat: join a streamed block by blockKey on the client (9d0ac64)
• chat: make the activity dock tell the truth when the server is unreachable (75a06bf)
• chat: move the resident process facts from the dock's arrow to a pill in the header (f27f9a8)
• chat: read-only mode for sessions held by a Claude Code background job (d81cbf4)
• chat: remove composer resident switch; intent applies only to new sessions (8b944e6)
• chat: replace the drawn scrollbar and turn rail with an input outline drawer (bd39344)
• chat: session store absolute-index window model (64bf293)
• chat: show this session's background tasks in the transcript (65bebd9)
• chat: title the collapsed work segment with action, count and elapsed (e18c57e)
• claude: give live streaming frames a block-level identity (03a8e9e)
• claude: hand each session its own Claude Code title at launch (94f74a7)
• claude: refuse an occupied session on the per-run path too (86aa952)
• debug-agent: resident control queue — driver hands over the queued uuid (51760ea)
• device-identity: announce the browser's identity on every WS connection (22db8cb)
• mcp-gateway: AC-252 self-referential write guard (980fe05)
• mcp-gateway: add approvals_list / approval_answer tools (AC-274) (44d3ede)
• mcp-gateway: add ui_clients_list read tool (56cee44)
• mcp-gateway: audit every tool call to mcp_audit_log with 90-day retention (AC-244) (10c053c)
• mcp-gateway: declare @modelcontextprotocol/sdk and zod as dependencies (AC-239) (4a2d0ab)
• mcp-gateway: declare accurate MCP tool annotations for every tool (2eb4afa)
• mcp-gateway: expose GET /api/settings/mcp-audit readback (AC-304) (0659f40)
• mcp-gateway: implement session_cancel_queued (AC-271) (25bf66c)
• mcp-gateway: implement session_create and session_interrupt (AC-250) (061da3d)
• mcp-gateway: implement session_reconfigure (AC-272) (6f3d6a1)
• mcp-gateway: implement session_start/session_close over resident host service (AC-251) (7f73cd5)
• mcp-gateway: make a reference that names nothing an error (AC-287) (15530fc)
• mcp-gateway: name the missing scopes in an INSUFFICIENT_SCOPE denial (AC-286) (6eb734c)
• mcp-gateway: OAuth-aware /mcp auth with discovery challenge (AC-263) (30f45ad)
• mcp-gateway: session_send returns a runId at once (AC-249) (224e864)
• mcp-gateway: stage-3 read tools over the injected services (AC-245) (85db940)
• mcp-gateway: stateless /mcp endpoint gated by MCP_ENABLED, mounted before static (AC-240) (4df2d93)
• mcp-smoke: AC-256 嵌套冒烟取证通道 + --check-record 判据 (6dd9de0)
• mcp: AC-273 session_background lists and stops held background work (1e9fcff)
• mcp: add ui_open_session — open a session in a chosen browser device (7f54cf7)
• oauth-consent: re-confirm the password and rate limit it per source (e9c60b3)
• oauth-consent: render the authorization screen as an SPA (8bdfc15)
• oauth: AC-259 authorization-server semantics (49ba2a6)
• oauth: add access_tokens table and personal access token service (ccb96e7)
• oauth: DCR registration policy and manual client creation (AC-264) (0157c13)
• oauth: mount the authorization-server HTTP surface end to end (AC-268) (714adb5)
• oauth: move the consent screen to the SPA behind a JSON contract (cf9d805)
• oauth: rate limit consent password submissions per source (AC-261) (74f3e83)
• oauth: settings routes for grants and clients (AC-265) (ad80150)
• oauth: validate access-token scopes against a single vocabulary (fb85d0b)
• oauth: 每个 oauth/mcp 请求留下一条无密日志 (f294161)
• providers: add Claude Schedule Tracker (AC-192) (431b60d)
• providers: add lease deriver and AC-195 frame-by-frame parity criterion (78f1b30)
• providers: add per-session Claude Turn Tracker (AC-186) (cea23b7)
• providers: emit a transcript row on a background task's terminal transition ([bf7e44f](bf7e44f...

CloudCLI Local Server Runtime (v1.39.0)

This prerelease contains the Local mode runtime for CloudCLI Desktop.

Download CloudCLI Desktop from the main v1.39.0 release. When you open Local CloudCLI, the desktop app automatically downloads the matching runtime from this prerelease.

You do not need to download these runtime files manually.

CloudCLI UI v1.38.2

1.38.2 (2026-09-30)

Bug Fixes

• desktop: point the local-server bundle default at the fork (035e0bb)
• point README and CLI help links at the fork (cf19214)

Documentation

• resident: 写明 App 侧占位名是过渡显示值，永远不是 SendMessage 地址 (447bc60)
• resident: 常驻地址不再由 App 自造，改为读 Claude Code 的进程派生名 (a6e0719)

CloudCLI UI v1.38.1

1.38.1 (2026-09-30)

New Features

• release: publish the fork as @yalehwang/cloudcli on npm (e433af3)

Bug Fixes

• e2e: drive the Enter criterion off the switch, not the retired consent tick (b154753)

CI/CD

• drop Discord release notification (upstream webhook, not configured on fork) (e3bdfa4)
• release: pass GITHUB_TOKEN to npm ci so @vscode/ripgrep's download is not rate-limited (98cd614)

Tests

• e2e: anchor the AC-109 detach window at the gesture's own input moment (d2f4445)
• e2e: bound the resident-running-view startup path (e963c86)
• e2e: cut the AC-109 window's frames at the gesture's own input moment (ef6e511)

CloudCLI Local Server Runtime (v1.38.2)

This prerelease contains the Local mode runtime for CloudCLI Desktop.

Download CloudCLI Desktop from the main v1.38.2 release. When you open Local CloudCLI, the desktop app automatically downloads the matching runtime from this prerelease.

You do not need to download these runtime files manually.

CloudCLI UI v1.38.0

1.38.0 (2026-09-29)

New Features

• add Playwright MCP directory to .gitignore (5c11f44)
• asr: land the inline-only multimodal adapter as the second recogniser (AC-132) (9a36a1c)
• chat: a resident status bar, its marks, and the turns nobody typed (c10b834)
• chat: decide the composer footer's tier from the box's own width (cb15da7)
• chat: disclose the resident-mode tradeoff before it is enabled (e51569b)
• chat: draw the running turn inline below md (b24128b)
• chat: identifier fidelity metric + voice fill-back reading (AC-114) (a56e1a3)
• chat: prototype a touch-scoped send key for the composer (bb787bc)
• chat: render workspace image paths in markdown (#1307) (4b98d2e)
• chat: route a busy resident session's send to the process instead of the local queue (df558ec)
• chat: say a compaction out loud, as one row with its summary folded in (#1295) (d450ed8), closes #1292
• chat: scope the composer send key to the device's input capabilities (7d842d4)
• chat: 权限模式随发送落库，客户端不再持久化 (5b61e03)
• claude-resident: intercept the three human-facing permission entries (4db6cae)
• claude-resident: reconcile held-work reasons from the Stop hook and the stream (e64c0e3)
• claude-resident: refuse a bypass launch when user settings enable Remote Control (b5f2575)
• claude: busy input joins the CLI's own queue and stays withdrawable until it starts (AC-163) (35e9401)
• claude: resident host driver — one CLI across turns (AC-161) (8436c6f)
• cost: show the session's Claude-generated ai-title in the /cost modal (ad95447)
• debug-agent: an output engine that writes the transcript it forwards (c05f4fd)
• debug-agent: drive resident host states, turn origins and the run seam (003c009)
• debug-agent: gate the debug agent so "off" means structurally absent (4b14dd8)
• debug-agent: hold resident debug sessions on a multiplexed host (ecca928)
• debug-agent: seed a scenario's lifecycle mode and keep the host writer across turns (5d9d1a1)
• e2e: Playwright toolchain + launch-profiles real-browser spec; profile create/edit UI with baseUrl/auth/contextWindow (d882915)
• goals: 激活 GOAL-007，并把激活记录改成实测的 (a204fff)
• goals: 立 GOAL-007 调试 Agent + 六条红先行判据（据 ADR-003 评审通过） (acc1430)
• i18n: add Indonesian language support (#1328) (b8e572b)
• launch-profiles: Profiles settings tab + composer profile select sends launchProfileId (AC-010) (803c71d)
• models: explain every env row kind, including unset (fe19d09)
• plugins: recommend GLM Usage plugin (#1323) (f05ba1f)
• projects: per-project session name filter (backend) (507d405)
• providers: cap each Claude session in its own systemd scope (4e25271)
• providers: give a resident process a stable SendMessage address (11b3370)
• providers: make a resident process's unattended turn a run (3fd1ecb)
• providers: pick the session watcher's mechanism per root, and back off when polling (a07e7ae)
• quay: scripts/test.sh emits per-file results for the quay tests page (e776459)
• resident-experiments: 控制协议清单 E9 取数并定稿 proposal (7d37fd6)
• resident-smoke: land AC-170 API-面真模型冒烟脚本、护栏判据与人证记录 (e7ab6a4)
• resident: collapse the status bar's per-kind lease chips into one count (917916c)
• resident: move the enable switch under the model card and retire the consent gate (6814265)
• scripts: add suite-concurrency-check.sh — AC-103 的并发判据读数 (64e46f0)
• scripts: gate scripts/ with strict TS and run its tests (e320cd0)
• scripts: restart the :3001 server unit on failure and cap its V8 heap (66755b7)
• scripts: 新增 suite-scope-check 守卫（活跃任务的自测作用域），并在 test.sh 前置调用 (ce34887)
• scripts: 给 test.sh 加 max-runtime / silence 两条活性看门狗，阈值由实测推出 (0fded85)
• server: resident caps from config, and an OOM fact a host can read (5cbe85d)
• session-hosts: bind sessions 1:N, refuse a second binding, supersede before start (5ea8711)
• session-hosts: drive Claude per-run hosts from the session-host layer (05db7d4)
• session-hosts: drive host lifecycle from leases, with two policies (b071ac9)
• session-hosts: lifecycle-mode preference write path and host start/close API (30ce434)
• session-hosts: make the resident idle ceiling configurable (AC-181) (4a3cf0b)
• session-hosts: report dropped resident sessions and sweep restart residue (0e14412)
• session-hosts: serve the host listing over GET /api/session-hosts (ac0feb8)
• session-title: show the live session name on every display surface (6fd914b)
• sessions: track where a session name came from and honour ai-title (9a80839)
• settings: close settings modal...

CloudCLI Local Server Runtime (v1.38.0)

This prerelease contains the Local mode runtime for CloudCLI Desktop.

Download CloudCLI Desktop from the main v1.38.0 release. When you open Local CloudCLI, the desktop app automatically downloads the matching runtime from this prerelease.

You do not need to download these runtime files manually.