- A #session=<id> link whose session never appears (closed, a typo, or another user's session in multi-user mode) is dropped after URL_SESSION_WAIT_MS (30 s) with a "Session not found" toast instead of waiting forever. One stored timer per link, cleared whenever the link is followed, replaced by a newer link, or retired. - goHome() and opening a web tab now retire a waiting link, so a session that turns up later no longer takes the screen. App-made web tab opens (frame self-recovery, the fallback after the active web tab closes) pass auto: true and keep it, as selectSession() does. - zh-CN translation for the new toast. - selectSession's auto: true comment now lists the #session=<id> link. - docs: the 30 s bound, a win.location.replace() tip that avoids piling up history entries, and the fragment declared a stable SemVer surface in versioning-policy.md. - Tests: timeout drops and toasts, an early arrival is still selected, the wait does not restart, goHome and a web tab retire it, an auto web tab open keeps it. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
4.5 KiB
Versioning & Stability Policy
Codeman follows Semantic Versioning (MAJOR.MINOR.PATCH),
managed via @changesets/cli (see the COM workflow in CLAUDE.md).
This document defines what the version number actually promises — i.e. which surfaces are covered by SemVer and which are explicitly not. It exists because "1.0" is a commitment to stability, and an undocumented public surface invites incompatible client assumptions we would then be pressured to keep.
Status: finalized for the 1.0 cut. The HTTP/SSE API is part of the stable surface — served under
/api/v1with a uniform response envelope and conventional HTTP status codes. Seeapi-reference.md.
What SemVer covers (the public, stable surface)
A MAJOR bump is required to break any of these after 1.0:
- The CLI. Command names, documented flags, and their behavior for
codeman <command>(published to npm asaicodeman; invoked ascodeman). This is the package's actual public entry point (bin).- The package is published to npm as
aicodemanand installs both theaicodemanandcodemancommands (binaliases);codemanis the canonical command used throughout the docs. Renaming either after 1.0 is a breaking change.
- The package is published to npm as
- The published
xterm-zerolag-inputlibrary, but on its own version line — it is versioned and released independently of the Codeman app. Its 1.0 status is a separate decision; the Codeman app reaching 1.0 does not implyxterm-zerolag-inputis 1.0. - Documented environment variables that configure deployment:
CODEMAN_PASSWORD,CODEMAN_USERNAME,CODEMAN_HOST,CODEMAN_PORT,CODEMAN_INSTANCE,CODEMAN_ALLOWED_HOSTS,CODEMAN_DATA_DIR,CODEMAN_TMUX_SOCKET, and the--host/--port/--httpsCLI flags. Removing or changing the meaning of one of these is breaking. - The HTTP API and SSE event channel, served under
/api/v1with the uniform{success:true,data}/{success:false,error,errorCode}envelope and conventional HTTP status codes. Endpoint paths, the response envelope, errorerrorCodevalues, and SSE event names are stable — seeapi-reference.md. Additive changes (new endpoints, new optional fields, new error codes, new SSE events) are non-breaking; breaking changes ship under a new prefix (/api/v2). The unversioned/api/...alias is kept working for the bundled UI. - The dashboard's
#session=<id>link. Opening the dashboard URL with a#session=<id>fragment selects that session if this client can see it. The fragment name and that meaning are stable; see Opening a session from your own page.
What SemVer does NOT cover (internal surfaces — may change in any release)
These may change in a MINOR (or even PATCH) release without a MAJOR bump:
- The
~/.codeman/state file formats (state.json,settings.json,mux-sessions.json, etc.). We make a best-effort to migrate existing data forward (and have done so across renames), but the on-disk schema is not a stable contract — do not write tooling that depends on its exact shape. - Internal TypeScript modules. The npm package is CLI-only;
importing it programmatically is not supported (there is no stable library entry point). - Experimental / opt-in features, regardless of the app's version:
Gesture Control (beta), Agent Teams
(
CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1), and anything labeled experimental in the UI or docs. These may change or be removed at any time.
Deprecation policy
When we need to change a covered surface:
- Prefer additive changes (new flag/env var/command) over breaking ones.
- A covered surface slated for removal is deprecated first — it keeps working
for at least one MINOR release with a runtime warning and a
CHANGELOG.mdnote pointing to the replacement — then removed in the next MAJOR. - Back-compat migration shims (e.g. the historical Claudeman→Codeman data/socket migration) are kept until a MAJOR boundary, then may be dropped.
Pre-1.0 (0.x) caveat
Until 1.0 ships, any release may contain breaking changes per SemVer's 0.x
allowance. The commitments above take effect at 1.0.0.
See also
CLAUDE.md— the COM release workflow (changesets, version bump, deploy).github/SECURITY.md— security reporting and the supported-version policydocs/security-architecture.md— the full trust model