v31.2.0

Summary

Codeplane v31.2.0 ships a new in-app login screen replacing the browser Basic Auth popup, collapses every client to exactly two color schemes (light and dark), and includes four TUI and app fixes.

Changes

• packages/codeplane/src/server/routes/ui.ts, packages/codeplane/src/server/middleware.ts, packages/codeplane/src/server/server.ts: replace the browser Basic Auth popup with a clean, in-app login screen. Serves the UI shell pre-auth and adds a GET /global/auth discovery probe; suppresses WWW-Authenticate on 401s so no native popup appears. Credentials captured in the form are stored on the active connection and become the same Authorization: Basic header all non-browser clients already use.
• packages/app/src/components/login-screen.tsx, auth-gate.tsx, utils/server-auth.ts, context/server.tsx, app.tsx: the web app login screen — centered column, hairline inputs, password reveal toggle, inline error state. Probes /global/auth and gates the app until credentials are provided.
• packages/app/src/i18n/*: login.* keys added across all 17 locales.
• packages/ui/src/theme/context.tsx, packages/app/src/components/settings-general.tsx, pages/layout.tsx, public/oc-theme-preload.js: remove the "System" auto-follow color scheme everywhere; the product now ships exactly two schemes (light and dark). A stored "system" value migrates to dark on read.
• packages/codeplane/src/tui/context/theme.tsx, feature-plugins/home/tips-view.tsx: the TUI now offers only the oc-2 theme (light/dark). The 33 other named themes, the theme picker, the theme_list keybind, and the /themes slash command are removed. Custom theme loading and terminal-derived system theme generation are removed.
• packages/codeplane/src/tui/context/theme/*.json: 33 non-oc-2 theme JSON files deleted; only oc-2.json remains.
• packages/codeplane/src/tui/context/theme.tsx, context/theme/oc-2.json: refine the oc-2 palette to match the Web/Desktop light + dark colors exactly.
• packages/app/src/pages/session/compaction-order.ts, session.tsx: fix compaction "Session compacted" dividers to sit chronologically between the turns they summarized, instead of floating to the bottom of the chat.
• packages/codeplane/src/tui/boot/wizard.tsx: the boot directory picker now grows to fill terminal height and shows scroll arrows when the list overflows.
• packages/codeplane/src/tui/feature-plugins/sidebar/footer.tsx, context/args.tsx, node-main.tsx: show the saved instance name under the Codeplane version in the TUI sidebar footer.

Verification

• bun turbo typecheck — 8/8 green
• bun lint — 0 errors
• bun --cwd packages/app test — 635 pass
• bun --cwd packages/codeplane test test/server/auth-middleware.test.ts test/server/public-ui-middleware.test.ts test/server/ui-routes.test.ts test/server/security.test.ts test/server/auth-policy.test.ts — 72 pass
• bun --cwd packages/codeplane test test/tui-suite/tests/sidebar-footer.test.tsx — pass
• bun script/build.ts --skip-embed-web-ui --skip-install --single — smoke test passed, binary prints 31.2.0

v31.2.0

Summary

Codeplane v31.2.0 ships a new in-app login screen replacing the browser Basic Auth popup, collapses every client to exactly two color schemes (light and dark), and includes four TUI and app fixes.

Changes

• packages/codeplane/src/server/routes/ui.ts, packages/codeplane/src/server/middleware.ts, packages/codeplane/src/server/server.ts: replace the browser Basic Auth popup with a clean, in-app login screen. Serves the UI shell pre-auth and adds a GET /global/auth discovery probe; suppresses WWW-Authenticate on 401s so no native popup appears. Credentials captured in the form are stored on the active connection and become the same Authorization: Basic header all non-browser clients already use.
• packages/app/src/components/login-screen.tsx, auth-gate.tsx, utils/server-auth.ts, context/server.tsx, app.tsx: the web app login screen — centered column, hairline inputs, password reveal toggle, inline error state. Probes /global/auth and gates the app until credentials are provided.
• packages/app/src/i18n/*: login.* keys added across all 17 locales.
• packages/ui/src/theme/context.tsx, packages/app/src/components/settings-general.tsx, pages/layout.tsx, public/oc-theme-preload.js: remove the "System" auto-follow color scheme everywhere; the product now ships exactly two schemes (light and dark). A stored "system" value migrates to dark on read.
• packages/codeplane/src/tui/context/theme.tsx, feature-plugins/home/tips-view.tsx: the TUI now offers only the oc-2 theme (light/dark). The 33 other named themes, the theme picker, the theme_list keybind, and the /themes slash command are removed. Custom theme loading and terminal-derived system theme generation are removed.
• packages/codeplane/src/tui/context/theme/*.json: 33 non-oc-2 theme JSON files deleted; only oc-2.json remains.
• packages/codeplane/src/tui/context/theme.tsx, context/theme/oc-2.json: refine the oc-2 palette to match the Web/Desktop light + dark colors exactly.
• packages/app/src/pages/session/compaction-order.ts, session.tsx: fix compaction "Session compacted" dividers to sit chronologically between the turns they summarized, instead of floating to the bottom of the chat.
• packages/codeplane/src/tui/boot/wizard.tsx: the boot directory picker now grows to fill terminal height and shows scroll arrows when the list overflows.
• packages/codeplane/src/tui/feature-plugins/sidebar/footer.tsx, context/args.tsx, node-main.tsx: show the saved instance name under the Codeplane version in the TUI sidebar footer.

Verification

• bun turbo typecheck — 8/8 green
• bun lint — 0 errors
• bun --cwd packages/app test — 635 pass
• bun --cwd packages/codeplane test test/server/auth-middleware.test.ts test/server/public-ui-middleware.test.ts test/server/ui-routes.test.ts test/server/security.test.ts test/server/auth-policy.test.ts — 72 pass
• bun --cwd packages/codeplane test test/tui-suite/tests/sidebar-footer.test.tsx — pass
• bun script/build.ts --skip-embed-web-ui --skip-install --single — smoke test passed, binary prints 31.2.0

Preview 31.2.0-next.646f93d55

Pre-release build for 31.2.0 with commit 646f93d.\n\nInstall with: npm install -g codeplane-ai@31.2.0-next.646f93d55

Preview 31.2.0-next.1a390896a

Pre-release build for 31.2.0 with commit 1a39089.\n\nInstall with: npm install -g codeplane-ai@31.2.0-next.1a390896a

v31.1.2

Summary

Codeplane v31.1.2 makes the release pipeline bulletproof under the isogonic org: package publishing now runs on clean GitHub-hosted runners so it can never be blocked by the self-hosted box running out of disk, and a batch of corrupted CI workflow definitions that failed to parse have been repaired.

Changes

• .github/workflows/npm-release.yml, .github/workflows/mobile-release.yml, .github/workflows/desktop-release.yml: the npm/desktop/mobile publish jobs (and the desktop Linux build leg) now run on ubuntu-latest instead of the shared self-hosted runner. The prior release published nothing because the runner's root disk hit 100% (npm error code ENOSPC, exit 228); a fresh ephemeral GitHub-hosted disk per run removes that failure mode entirely. macOS and Windows desktop legs are unchanged.
• .github/workflows/npm-release.yml: the workflow now triggers only on the canonical v[0-9]+.[0-9]+.[0-9]+ tag, so the paired -desktop/-mobile tags no longer re-fire an npm publish of an already-published immutable version.
• .github/workflows/{build-linux,codeowners-check,docker-build,branch-protection,secret-rotation,release-orchestrator}.yml: repaired definitions that contained duplicated job blocks, stray dedented shell outside run: scalars, and an unterminated heredoc — these failed to parse and aborted instantly (0s). release-orchestrator now genuinely waits for the npm publish and verifies the meta + platform packages.
• .github/workflows/security-scan.yml: TruffleHog resolves its diff base from the PR base SHA on pull requests and falls back to HEAD~1 on pushes, fixing the BASE and HEAD commits are the same failure on single-commit pushes.
• packages/codeplane/script/build.ts: the build smoke test skips the serve HTTP check when --skip-embed-web-ui is set (CI builds without an embedded web UI no longer fail with HTTP 503); the --version check still runs.

Verification

• bun turbo typecheck (8/8 packages green)
• bun lint (0 errors)
• All 100 workflow YAML files validated with PyYAML (0 parse errors), a strict duplicate-key loader (0 dup keys), and actionlint 1.7.7 (0 syntax errors)
• bun run version:bump 31.1.2 synced 10 package.json files + packages/shared/src/version.ts

Full operations manual in AGENTS.md.

v31.1.2

Summary

Codeplane v31.1.2 makes the release pipeline bulletproof under the isogonic org: package publishing now runs on clean GitHub-hosted runners so it can never be blocked by the self-hosted box running out of disk, and a batch of corrupted CI workflow definitions that failed to parse have been repaired.

Changes

• .github/workflows/npm-release.yml, .github/workflows/mobile-release.yml, .github/workflows/desktop-release.yml: the npm/desktop/mobile publish jobs (and the desktop Linux build leg) now run on ubuntu-latest instead of the shared self-hosted runner. The prior release published nothing because the runner's root disk hit 100% (npm error code ENOSPC, exit 228); a fresh ephemeral GitHub-hosted disk per run removes that failure mode entirely. macOS and Windows desktop legs are unchanged.
• .github/workflows/npm-release.yml: the workflow now triggers only on the canonical v[0-9]+.[0-9]+.[0-9]+ tag, so the paired -desktop/-mobile tags no longer re-fire an npm publish of an already-published immutable version.
• .github/workflows/{build-linux,codeowners-check,docker-build,branch-protection,secret-rotation,release-orchestrator}.yml: repaired definitions that contained duplicated job blocks, stray dedented shell outside run: scalars, and an unterminated heredoc — these failed to parse and aborted instantly (0s). release-orchestrator now genuinely waits for the npm publish and verifies the meta + platform packages.
• .github/workflows/security-scan.yml: TruffleHog resolves its diff base from the PR base SHA on pull requests and falls back to HEAD~1 on pushes, fixing the BASE and HEAD commits are the same failure on single-commit pushes.
• packages/codeplane/script/build.ts: the build smoke test skips the serve HTTP check when --skip-embed-web-ui is set (CI builds without an embedded web UI no longer fail with HTTP 503); the --version check still runs.

Verification

• bun turbo typecheck (8/8 packages green)
• bun lint (0 errors)
• All 100 workflow YAML files validated with PyYAML (0 parse errors), a strict duplicate-key loader (0 dup keys), and actionlint 1.7.7 (0 syntax errors)
• bun run version:bump 31.1.2 synced 10 package.json files + packages/shared/src/version.ts

Full operations manual in AGENTS.md.

v31.1.2

Summary

Codeplane v31.1.2 makes the release pipeline bulletproof under the isogonic org: package publishing now runs on clean GitHub-hosted runners so it can never be blocked by the self-hosted box running out of disk, and a batch of corrupted CI workflow definitions that failed to parse have been repaired.

Changes

• .github/workflows/npm-release.yml, .github/workflows/mobile-release.yml, .github/workflows/desktop-release.yml: the npm/desktop/mobile publish jobs (and the desktop Linux build leg) now run on ubuntu-latest instead of the shared self-hosted runner. The prior release published nothing because the runner's root disk hit 100% (npm error code ENOSPC, exit 228); a fresh ephemeral GitHub-hosted disk per run removes that failure mode entirely. macOS and Windows desktop legs are unchanged.
• .github/workflows/npm-release.yml: the workflow now triggers only on the canonical v[0-9]+.[0-9]+.[0-9]+ tag, so the paired -desktop/-mobile tags no longer re-fire an npm publish of an already-published immutable version.
• .github/workflows/{build-linux,codeowners-check,docker-build,branch-protection,secret-rotation,release-orchestrator}.yml: repaired definitions that contained duplicated job blocks, stray dedented shell outside run: scalars, and an unterminated heredoc — these failed to parse and aborted instantly (0s). release-orchestrator now genuinely waits for the npm publish and verifies the meta + platform packages.
• .github/workflows/security-scan.yml: TruffleHog resolves its diff base from the PR base SHA on pull requests and falls back to HEAD~1 on pushes, fixing the BASE and HEAD commits are the same failure on single-commit pushes.
• packages/codeplane/script/build.ts: the build smoke test skips the serve HTTP check when --skip-embed-web-ui is set (CI builds without an embedded web UI no longer fail with HTTP 503); the --version check still runs.

Verification

• bun turbo typecheck (8/8 packages green)
• bun lint (0 errors)
• All 100 workflow YAML files validated with PyYAML (0 parse errors), a strict duplicate-key loader (0 dup keys), and actionlint 1.7.7 (0 syntax errors)
• bun run version:bump 31.1.2 synced 10 package.json files + packages/shared/src/version.ts

Full operations manual in AGENTS.md.

Preview 31.1.2-next.ec0984e03

Pre-release build for 31.1.2 with commit ec0984e.\n\nInstall with: npm install -g codeplane-ai@31.1.2-next.ec0984e03

Preview 31.1.2-next.e2f0d4c7a

Pre-release build for 31.1.2 with commit e2f0d4c.\n\nInstall with: npm install -g codeplane-ai@31.1.2-next.e2f0d4c7a

Preview 31.1.2-next.d8e903e58

Pre-release build for 31.1.2 with commit d8e903e.\n\nInstall with: npm install -g codeplane-ai@31.1.2-next.d8e903e58