@idl3/claude-control 1.4.7 → 1.5.0

package/lib/picker-send-guard.js

@@ -0,0 +1,35 @@
+/**
+ * picker-send-guard.js — pure predicate for the send-time synchronous picker guard.
+ *
+ * Extracted so it can be unit-tested without importing server.js (which starts
+ * a server on load). The integration glue (capture + the kind-appropriate parser:
+ * parsePanePrompt for claude, parseCodexPrompt for codex) lives in server.js; this
+ * file owns only the parser-agnostic decision logic on the parsed result.
+ */
+
+/**
+ * Returns true when a free-text `reply` should be REFUSED because a picker is
+ * open in the pane.
+ *
+ * @param {{ viaAnswer: boolean|undefined, kind: string, transport: string, parsedPicker: object|null }} opts
+ * @returns {boolean}
+ */
+export function shouldRefuseSendForPicker({ viaAnswer, kind, transport, parsedPicker }) {
+  // viaAnswer replies are the trailing keystroke AFTER the answer component has
+  // already navigated the picker — they ARE the answer, so they must pass through.
+  if (viaAnswer) return false;
+
+  // Only keystroke-TUI panes have a tmux picker to guard. Claude (AskUserQuestion
+  // + pane-scrape menus, via parsePanePrompt) and Codex (exec/patch/trust approvals
+  // + numbered questions, via parseCodexPrompt) both qualify. The caller picks the
+  // parser by kind and passes its result as parsedPicker; this predicate only reads
+  // the boolean presence, so one decision path covers both kinds.
+  if (kind !== 'claude' && kind !== 'codex') return false;
+
+  // claude-print transport is not a keystroke TUI — no tmux picker to guard.
+  // (Codex panes never use the 'print' transport, so this is a Claude-only carve-out.)
+  if (transport === 'print') return false;
+
+  // ANY picker present (question, numbered menu, trust/plan/permission scrape) → refuse.
+  return Boolean(parsedPicker);
+}

package/lib/prompt.js

@@ -35,6 +35,29 @@ const ESC_HINT_RE = /\besc\b[^\n]*(cancel|reject|keep)/i;
 const BOTTOM_REGION = 80;
 const MAX_LABEL = 80;
 
+// Stable phrases that mark a GENUINE Claude system prompt (permission / trust /
+// plan-review) — as opposed to a custom numbered picker an agent or skill draws
+// itself, or a prose question the assistant typed. Only system prompts should
+// pop the question component via the pane scrape; AskUserQuestion flows through
+// the structured transcript path instead. Conservative by design: an
+// unrecognized picker is treated as NOT a system prompt and suppressed.
+const SYSTEM_PROMPT_RE =
+  /don'?t ask again|tell claude what to do differently|keep planning|auto-?accept edits|manually approve edits|do you want to proceed|would you like to proceed|do you trust|yes,?\s*proceed|no,?\s*exit/i;
+
+/**
+ * Is this parsed prompt a recognized Claude system prompt (permission / trust /
+ * plan-review)? Matches the question text + option labels against stable system
+ * phrasings. Returns false for custom agent/skill pickers and prose questions.
+ *
+ * @param {{question?:string, options?:{label:string}[]}|null} prompt
+ * @returns {boolean}
+ */
+export function isSystemPrompt(prompt) {
+  if (!prompt) return false;
+  const text = [prompt.question || '', ...(prompt.options || []).map((o) => o.label)].join(' \n ');
+  return SYSTEM_PROMPT_RE.test(text);
+}
+
 /**
  * Parse a Claude Code numbered selection prompt out of a pane capture.
  *

package/lib/reply-guard.js

@@ -0,0 +1,24 @@
+/**
+ * lib/reply-guard.js — Pure predicate for the server-side reply safety guard.
+ *
+ * Extracted so it can be unit-tested without importing server.js (which starts
+ * an HTTP server on import and carries heavyweight side effects).
+ */
+
+/**
+ * Returns true when sending a raw reply (bracketed-paste + Enter via tmux) must
+ * be blocked because an AskUserQuestion picker is currently open in the pane.
+ *
+ * Callers should pass BOTH available pending signals so neither source can be
+ * individually defeated by a race or stale state:
+ *  - tailerPending  — real-time pending object from TranscriptTailer.getPending()
+ *                     (non-null when an open tool_use has no matching tool_result)
+ *  - flagPending    — registry session.pending flag (set via setPending / _pollThinking)
+ *
+ * @param {object|null|undefined} tailerPending  TranscriptTailer.getPending() result
+ * @param {boolean|null|undefined} flagPending   registry session.pending flag
+ * @returns {boolean}
+ */
+export function replyShouldBlock(tailerPending, flagPending) {
+  return Boolean(tailerPending) || Boolean(flagPending);
+}

package/lib/sessions.js

@@ -15,7 +15,7 @@ import { execFile as _execFile } from 'node:child_process';
 import { promisify } from 'node:util';
 
 import { parseTuiStatus, prettyModel } from './tui.js';
-import { parsePanePrompt } from './prompt.js';
+import { parsePanePrompt, isSystemPrompt } from './prompt.js';
 import { assignTranscripts, parseEtime, fingerprintScore, shouldRebind } from './match.js';
 import { pinKey } from './pins.js';
 import { readPaneRegistry, gcPaneRegistry } from './pane-registry.js';
@@ -56,7 +56,8 @@ function isClaudeCmd(cmd) {
   return /^\d+\.\d+(\.\d+)?$/.test(String(cmd || '').trim());
 }
 
-const TAIL_BYTES = 64 * 1024; // 64 KB max tail read
+const TAIL_BYTES = 64 * 1024; // 64 KB initial tail read
+const MAX_TAIL_BYTES = 1024 * 1024; // 1 MB ceiling — ensures a single oversized AskUserQuestion record is never split at the front
 const REFRESH_INTERVAL_MS = 4000;
 const CTX_POLL_INTERVAL_MS = 12000; // TUI ctx%/model capture — slower than refresh
 const THINKING_POLL_INTERVAL_MS = 2000; // bottom-5-line capture for the live "thinking" flag
@@ -260,10 +261,27 @@ async function readTail(filePath, maxBytes) {
  * @param {number} [birthtime]  birthtime (ms since epoch) of the file
  * @returns {Promise<object|null>}
  */
-async function extractTailRecord(filePath, mtime, birthtime = null) {
-  const buf = await readTail(filePath, TAIL_BYTES);
+export async function extractTailRecord(filePath, mtime, birthtime = null) {
+  let buf = await readTail(filePath, TAIL_BYTES);
   if (!buf) return null;
 
+  // If the file is larger than TAIL_BYTES, the read started mid-file, so the
+  // first line of the buffer is almost certainly partial (truncated at the
+  // front). A single large AskUserQuestion record (>64 KB) can have its
+  // opening `{"type":"assistant"...tool_use...` in that discarded partial
+  // line, causing detectTranscriptPending to miss the open question entirely.
+  // Re-reading up to MAX_TAIL_BYTES guarantees any single record ≤ 1 MB is
+  // captured whole at the front of the buffer.
+  try {
+    const stat = await fs.stat(filePath);
+    if (stat.size > TAIL_BYTES) {
+      const larger = await readTail(filePath, Math.min(stat.size, MAX_TAIL_BYTES));
+      if (larger) buf = larger;
+    }
+  } catch {
+    // stat failed — proceed with the initial 64 KB buffer
+  }
+
   const text = buf.toString('utf8');
   // Split on newlines; the first segment may be a partial line (the tail read
   // can start part-way through a line), so we never trust it — we only walk
@@ -1072,7 +1090,11 @@ export class SessionRegistry extends EventEmitter {
           // numbered picker means a question is waiting — even if the transcript
           // isn't matched. This is why some sessions wrongly read as "sleeping".
           if (s.kind === 'claude') {
-            const prompt = parsePanePrompt(cap);
+            // Only a RECOGNIZED system prompt (permission/trust/plan) counts from
+            // the scrape; custom agent/skill pickers don't light the ASK badge.
+            // Real AskUserQuestion still flows via the transcript (_pendingMap).
+            const parsed = parsePanePrompt(cap);
+            const prompt = isSystemPrompt(parsed) ? parsed : null;
             const rec = { pending: !!prompt, question: prompt?.question ?? null };
             this._panePromptMap.set(s.target, rec);
             const merged =

package/lib/tmux.js

@@ -521,16 +521,28 @@ let _pasteBufferSeq = 0;
  * Falls back to the old literal `send-keys` path if the buffer route errors, so
  * behaviour never regresses below today's baseline.
  *
+ * Submit is DETERMINISTIC, not timed: after the paste we poll the pane until the
+ * TUI's "Pasting…" indicator clears, THEN send Enter. A pasted image path is read
+ * + encoded asynchronously by the TUI (it shows "Pasting…" meanwhile); an Enter
+ * sent during that window is swallowed and the message sits unsent in the box —
+ * the exact bug a fixed delay could only guess around. `settleMs` is the MAX time
+ * to wait for "Pasting…" to clear (a ceiling, not a fixed cost — the poll exits as
+ * soon as the paste finishes). The reply handler scales it per attachment.
+ *
  * @param {string} target  e.g. "0:3"
  * @param {string} text
- * @param {{ _run?: Function, _delay?: Function }} [_injected]  Test-only seam.
+ * @param {{ _run?: Function, _delay?: Function, settleMs?: number }} [_injected]  Test seam + poll budget.
  * @returns {Promise<void>}
  */
-export async function sendText(target, text, { _run, _delay } = {}) {
+export async function sendText(target, text, { _run, _delay, settleMs } = {}) {
   assertTarget(target);
   const runner = _run ?? runTmux;
   const delay = _delay ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const SETTLE_MS = 90; // give the TUI time to commit the paste before Enter
+  const BUDGET_MS = Number.isFinite(settleMs) ? settleMs : 2000; // max wait for paste to settle
+  const INITIAL_MS = 120; // let the TUI enter its "Pasting…" state before polling
+  const POLL_MS = 120; // re-check cadence
+  const POST_PASTE_MS = 250; // commit settle after "Pasting…" clears, before Enter
+  const PASTING_RE = /Pasting/i;
 
   const bufName = `cc-paste-${process.pid}-${_pasteBufferSeq++}`;
   try {
@@ -538,8 +550,22 @@ export async function sendText(target, text, { _run, _delay } = {}) {
     await runner(['set-buffer', '-b', bufName, text]);
     // Bracketed paste into the pane (-p), deleting the buffer after (-d).
     await runner(['paste-buffer', '-d', '-p', '-b', bufName, '-t', target]);
-    // Let the paste land in the editable buffer before submitting.
-    await delay(SETTLE_MS);
+    // Wait for the TUI to FINISH ingesting the paste rather than guessing a delay:
+    // poll the pane until "Pasting…" is gone (bounded by the budget as a ceiling).
+    await delay(INITIAL_MS);
+    const maxPolls = Math.max(1, Math.ceil(BUDGET_MS / POLL_MS));
+    for (let p = 0; p < maxPolls; p++) {
+      let cap = '';
+      try {
+        cap = (await runner(['capture-pane', '-p', '-t', target])).stdout || '';
+      } catch {
+        break; // capture failed — don't hang; fall through to Enter
+      }
+      if (!PASTING_RE.test(cap)) break;
+      await delay(POLL_MS);
+    }
+    // Let the input commit the just-ingested content (image chip) before submit.
+    await delay(POST_PASTE_MS);
     await runner(['send-keys', '-t', target, 'Enter']);
   } catch {
     // Fallback to the legacy literal path (also clean up a possibly-orphaned buffer).

package/lib/transcript.js

@@ -36,6 +36,7 @@ const TAIL_MAX_BYTES = envInt('TAIL_BYTES') ?? 8 * 1024 * 1024; // 8 MB
 // well within the server's RSS budget.
 // Override with CLAUDE_CONTROL_MAX_BUFFER (legacy: COCKPIT_MAX_BUFFER).
 const DEFAULT_MAX_BUFFER = envInt('MAX_BUFFER') ?? 4000;
+const DEFAULT_POLL_MS = envInt('TAIL_POLL_MS') ?? 1000;
 
 // ---------------------------------------------------------------------------
 // Internal helper: read the last `maxBytes` of a file without loading it all.
@@ -132,6 +133,27 @@ export function parseRecord(line) {
   }
 
   const rawType = record.type;
+
+  // A message typed while the agent is busy is stored by Claude Code as a
+  // `queued_command` attachment — NOT a type=user record. Surface human prompt
+  // queues as user messages so they render as a real bubble AND let the cockpit's
+  // optimistic send bubble reconcile (it matches on user-message text). Marked
+  // queued:true so convert drops it if the same text later lands as a type=user.
+  if (rawType === 'attachment' && record.attachment?.type === 'queued_command') {
+    const a = record.attachment;
+    if (a.origin?.kind !== 'human' || a.commandMode !== 'prompt') return null;
+    const prompt = typeof a.prompt === 'string' ? a.prompt : '';
+    if (!prompt.trim()) return null;
+    return {
+      uuid: record.uuid ?? null,
+      role: 'user',
+      ts: record.timestamp ?? null,
+      blocks: [{ kind: 'text', text: prompt }],
+      rawType: 'queued_command',
+      queued: true,
+    };
+  }
+
   if (rawType !== 'user' && rawType !== 'assistant') return null;
 
   const msg = record.message;
@@ -194,13 +216,24 @@ export function parseRecord(line) {
 export class TranscriptTailer extends EventEmitter {
   /**
    * @param {string} filePath
-   * @param {{ maxBuffer?: number, debounceMs?: number, parser?: Function }} options
+   * @param {{ maxBuffer?: number, debounceMs?: number, pollMs?: number, watch?: boolean, parser?: Function }} options
    */
-  constructor(filePath, { maxBuffer = DEFAULT_MAX_BUFFER, debounceMs = 150, parser = parseRecord } = {}) {
+  constructor(
+    filePath,
+    {
+      maxBuffer = DEFAULT_MAX_BUFFER,
+      debounceMs = 150,
+      pollMs = DEFAULT_POLL_MS,
+      watch = true,
+      parser = parseRecord,
+    } = {},
+  ) {
     super();
     this._filePath = filePath;
     this._maxBuffer = maxBuffer;
     this._debounceMs = debounceMs;
+    this._pollMs = Number.isFinite(pollMs) && pollMs > 0 ? pollMs : 0;
+    this._watchEnabled = watch !== false;
     this._parse = parser;
 
     /** @type {import('./transcript.js').NormalizedMessage[]} */
@@ -221,6 +254,9 @@ export class TranscriptTailer extends EventEmitter {
     /** fs.FSWatcher | null */
     this._watcher = null;
 
+    /** Poll fallback timer handle */
+    this._pollTimer = null;
+
     /** Debounce timer handle */
     this._debounceTimer = null;
 
@@ -229,6 +265,9 @@ export class TranscriptTailer extends EventEmitter {
 
     /** Set by stop(); guards against attaching a watcher after teardown. */
     this._stopped = false;
+
+    /** start() is one-shot even when watch=false and polling owns the tail. */
+    this._started = false;
   }
 
   // -------------------------------------------------------------------------
@@ -258,11 +297,13 @@ export class TranscriptTailer extends EventEmitter {
    * if already watching.
    */
   async start() {
-    if (this._watcher) return;
+    if (this._started) return;
+    this._started = true;
 
     try {
       await this._initialLoad();
     } catch (err) {
+      this._started = false;
       this.emit('error', err);
       return;
     }
@@ -272,14 +313,36 @@ export class TranscriptTailer extends EventEmitter {
     // watcher to a tailer nobody is listening to — that would leak an fd.
     if (this._stopped) return;
 
-    // Start watching. Use 'rename' events too (handles log rotation).
-    try {
-      this._watcher = fs.watch(this._filePath, { persistent: false }, () => {
-        this._scheduleRead();
-      });
-      this._watcher.on('error', (err) => this.emit('error', err));
-    } catch (err) {
-      this.emit('error', err);
+    // Start watching. Use 'rename' events too (handles log rotation). fs.watch
+    // is best-effort on macOS and network filesystems, so a poll fallback below
+    // is intentionally kept active even when the watcher starts successfully.
+    if (this._watchEnabled) {
+      try {
+        this._watcher = fs.watch(this._filePath, { persistent: false }, () => {
+          this._scheduleRead();
+        });
+        this._watcher.on('error', (err) => this.emit('error', err));
+      } catch (err) {
+        if (!this._pollMs) {
+          this._started = false;
+          this.emit('error', err);
+          return;
+        }
+      }
+    }
+
+    if (this._pollMs) {
+      this._pollTimer = setInterval(() => {
+        this._readIncremental().catch((err) => {
+          if (err.code !== 'ENOENT') this.emit('error', err);
+        });
+      }, this._pollMs);
+      if (this._pollTimer.unref) this._pollTimer.unref();
+    }
+
+    if (!this._watcher && !this._pollTimer) {
+      this._started = false;
+      this.emit('error', new Error('TranscriptTailer has neither watch nor poll enabled'));
       return;
     }
 
@@ -288,7 +351,7 @@ export class TranscriptTailer extends EventEmitter {
     // Kick off an immediate incremental read to catch any bytes missed in that gap.
     // Use setImmediate to let the watcher finish OS-level registration first.
     setImmediate(() => {
-      if (!this._watcher) return; // stop() was called before this fired
+      if (this._stopped) return; // stop() was called before this fired
       this._readIncremental().catch((err) => {
         // ENOENT means the file was deleted/rotated; not a hard error here.
         if (err.code !== 'ENOENT') this.emit('error', err);
@@ -303,6 +366,10 @@ export class TranscriptTailer extends EventEmitter {
       clearTimeout(this._debounceTimer);
       this._debounceTimer = null;
     }
+    if (this._pollTimer !== null) {
+      clearInterval(this._pollTimer);
+      this._pollTimer = null;
+    }
     if (this._watcher) {
       try { this._watcher.close(); } catch { /* ignore */ }
       this._watcher = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@idl3/claude-control",
-  "version": "1.4.7",
+  "version": "1.5.0",
   "type": "module",
   "description": "Local web UI to watch and drive your Claude Code sessions running in tmux — live transcripts, reply, answer AskUserQuestion, attach files, from a browser or phone.",
   "keywords": [

package/server.js

@@ -22,7 +22,7 @@ import * as terminal from './lib/terminal.js';
 import * as shell from './lib/shell.js';
 import { TranscriptTailer } from './lib/transcript.js';
 import { SubAgentsWatcher, CodexSubAgentsWatcher, listAgents } from './lib/subagents.js';
-import { parsePanePrompt } from './lib/prompt.js';
+import { parsePanePrompt, isSystemPrompt } from './lib/prompt.js';
 import { SessionRegistry, listRecentTranscripts } from './lib/sessions.js';
 import { loadPins, savePins, validateTranscriptPath, pinKey } from './lib/pins.js';
 import { writePaneRegistryRecord } from './lib/pane-registry.js';
@@ -46,6 +46,8 @@ import {
   recommendClaudeModel,
 } from './lib/models.js';
 import { transcribe } from './lib/transcribe.js';
+import { replyShouldBlock } from './lib/reply-guard.js';
+import { shouldRefuseSendForPicker } from './lib/picker-send-guard.js';
 import { listSkills, readSkill } from './lib/skills.js';
 // Note: the client offers [WS_PROTOCOL, token] as subprotocols; the `ws`
 // library auto-selects the FIRST offered one (the non-secret WS_PROTOCOL label)
@@ -1779,6 +1781,7 @@ async function ensureClaudePrintForSession(session) {
 function startPromptPoller(id, sub) {
   if (sub.promptTimer) return;
   sub._lastPrompt = undefined;
+  sub._lastPickerOpen = undefined; // tracks last-broadcast picker state for Item 2
   sub._promptTicking = false;
   const tick = async () => {
     if (sub._promptTicking) return;
@@ -1787,11 +1790,26 @@ function startPromptPoller(id, sub) {
       const session = sessionById(id);
       if (!session || !tmux.isValidTarget(session.target)) return;
       let prompt = null;
+      let pickerOpen = false;
       try {
-        // 80 lines so a tall AskUserQuestion (question + 5 multi-line options +
-        // footer) fits the parser window (parsePanePrompt BOTTOM_REGION).
-        const cap = await tmux.capturePane(session.target, 80);
-        prompt = session.kind === 'codex' ? parseCodexPrompt(cap) : parsePanePrompt(cap);
+        // Visible pane only (no scrollback) — an answered picker frozen in
+        // history must not re-fire. The live prompt is always on screen.
+        const cap = await tmux.capturePane(session.target, 80, false, false, { visibleOnly: true });
+        if (session.kind === 'codex') {
+          prompt = parseCodexPrompt(cap);
+          pickerOpen = !!prompt; // for codex, pickerOpen tracks the same parsed prompt
+        } else {
+          // Claude: only surface RECOGNIZED system prompts (permission / trust /
+          // plan-review). Custom agent/skill pickers and prose questions are NOT
+          // shown — a real AskUserQuestion flows through the structured transcript
+          // path (pending), not this scrape.
+          const parsed = parsePanePrompt(cap);
+          prompt = isSystemPrompt(parsed) ? parsed : null;
+          // pickerOpen is broader than prompt: ANY numbered picker with cursor/footer
+          // qualifies (not just the narrower isSystemPrompt subset). This reuses the
+          // SAME capture already taken — zero new tmux execs.
+          pickerOpen = !!parsed;
+        }
       } catch {
         return;
       }
@@ -1806,6 +1824,13 @@ function startPromptPoller(id, sub) {
         });
         broadcastTo(id, { type: 'prompt', id, prompt });
       }
+      // Broadcast picker awareness separately from the narrower prompt rendering.
+      // pickerOpen=true for ANY parsePanePrompt hit (not just isSystemPrompt) so
+      // clients can disable free-text send without waiting for the next poll cycle.
+      if (pickerOpen !== sub._lastPickerOpen) {
+        sub._lastPickerOpen = pickerOpen;
+        broadcastTo(id, { type: 'picker', id, open: pickerOpen });
+      }
     } finally {
       sub._promptTicking = false;
     }
@@ -1839,7 +1864,7 @@ wss.on('connection', (ws) => {
     try {
       await handleClientMessage(ws, msg);
     } catch (err) {
-      send(ws, { type: 'ack', op: msg?.type || 'unknown', ok: false, error: String(err?.message || err) });
+      send(ws, { type: 'ack', op: msg?.type || 'unknown', ok: false, error: String(err?.message || err), reqId: msg?.reqId });
     }
   });
 
@@ -1880,7 +1905,35 @@ async function handleClientMessage(ws, msg) {
       const session = sessionById(msg.id);
       if (!session) throw new Error('unknown session');
       if (!tmux.isValidTarget(session.target)) throw new Error('invalid tmux target');
+      // SAFETY: never send a raw reply (paste+Enter) into a pane with an OPEN
+      // picker (AskUserQuestion OR a pane-scrape permission/trust/plan/numbered
+      // menu) — the Enter would select an option, silently answering it. The
+      // client must answer via the structured 'answer'/'promptkey'/'promptselect'
+      // path. Refuse raw replies here as defense-in-depth (covers stale/racey
+      // clients). EXCEPTION: a reply flagged `viaAnswer` is the trailing free-text
+      // of a DELIBERATE answer the inline component sends AFTER it has already
+      // navigated the picker — that IS the answer, so it must pass through.
+      if (!msg.viaAnswer) {
+        const replySub = subscriptions.get(msg.id);
+        const tailerPending = replySub?.tailer ? replySub.tailer.getPending() : null;
+        const flagPending = !!session.pending;
+        if (replyShouldBlock(tailerPending, flagPending)) {
+          send(ws, { type: 'ack', op: 'reply', ok: false, reqId: msg.reqId, error: 'A question is open — answer it via the question component' });
+          return;
+        }
+      }
       const replyText = String(msg.text ?? '');
+      const reqId = msg.reqId; // correlation id: echoed in the ack so the client
+                               // marks THIS send delivered (not just WS-written).
+      // Per-attachment settle: each pasted image path is ingested asynchronously
+      // by the TUI (read + validate/encode), and a too-early Enter lands before
+      // that finishes, leaving the message unsent in the box. Scale the paste→Enter
+      // gap by the attachment count (capped) so the Enter always submits.
+      const attachments = Math.max(0, Number(msg.attachments) || 0);
+      // sendText polls for the TUI's "Pasting…" to clear before Enter; settleMs is
+      // the MAX it waits (a ceiling, not a fixed cost — it exits as soon as the
+      // paste finishes). Budget generously per image so even a slow read fits.
+      const settleMs = Math.min(20000, 1500 + attachments * 3000);
       return runSerial(session.target, async () => {
         if (session.kind === 'claude' && session.transport === 'print') {
           await ensureClaudePrintForSession(session);
@@ -1891,7 +1944,7 @@ async function handleClientMessage(ws, msg) {
             registry.setThinking(session.target, false);
             throw err;
           }
-          send(ws, { type: 'ack', op: 'reply', ok: true, transport: 'claude-print' });
+          send(ws, { type: 'ack', op: 'reply', ok: true, transport: 'claude-print', reqId });
           return;
         }
         if (session.kind === 'codex') {
@@ -1904,15 +1957,41 @@ async function handleClientMessage(ws, msg) {
               registry.setThinking(session.target, false);
               throw err;
             }
-            send(ws, { type: 'ack', op: 'reply', ok: true, transport: 'codex-rpc' });
+            send(ws, { type: 'ack', op: 'reply', ok: true, transport: 'codex-rpc', reqId });
             return;
           }
           // Codex TUI compatibility: only non-app-server Codex panes may use
           // tmux keystrokes. RPC app-server panes must never receive prompt text
           // in their terminal buffer.
         }
-        await tmux.sendText(session.target, replyText);
-        send(ws, { type: 'ack', op: 'reply', ok: true });
+        // ── Synchronous send-time picker guard ─────────────────────────────
+        // This is the race-free authority: it checks the ACTUAL current screen
+        // at send-time, independent of poll cadence, the 64KB flag window, and
+        // tailer state. The replyShouldBlock flag-check above (lines ~1901-1909)
+        // stays as cheap defense-in-depth that can short-circuit before we even
+        // get here. viaAnswer replies bypass BOTH guards (they are the answer).
+        //
+        // Gate: keystroke-TUI panes (claude AND codex-TUI). Print transport has no
+        // keystroke TUI to guard against, and codex-rpc panes already returned above
+        // (so any codex pane reaching here fell through to tmux sendText). The parser
+        // is chosen by kind — parsePanePrompt for claude, parseCodexPrompt for codex —
+        // because the two TUIs scrape pickers differently; the pure predicate then
+        // decides on the boolean presence of a parsed picker, identical for both.
+        if (!msg.viaAnswer && (session.kind === 'claude' || session.kind === 'codex') && session.transport !== 'print') {
+          try {
+            const cap = await tmux.capturePane(session.target, 80, false, false, { visibleOnly: true });
+            const parsedPicker = session.kind === 'codex' ? parseCodexPrompt(cap) : parsePanePrompt(cap);
+            if (shouldRefuseSendForPicker({ viaAnswer: msg.viaAnswer, kind: session.kind, transport: session.transport, parsedPicker })) {
+              send(ws, { type: 'ack', op: 'reply', ok: false, reqId, error: 'A question/picker is open in this pane — answer it via the question UI, not a free-text reply.' });
+              return;
+            }
+          } catch {
+            // Capture failed: do NOT block. The replyShouldBlock flag-check above
+            // is the fallback. Better to allow a send than to stall on a tmux error.
+          }
+        }
+        await tmux.sendText(session.target, replyText, { settleMs });
+        send(ws, { type: 'ack', op: 'reply', ok: true, reqId });
       });
     }
     case 'answer': {

package/web/dist/assets/{core-BeFEsKn3.js → core-7Rg8ndFI.js}

@@ -1,3 +1,3 @@
-import{g as Ve}from"./index-4j41LhdC.js";function xe(e){return e instanceof Map?e.clear=e.delete=e.set=function(){throw new Error("map is read-only")}:e instanceof Set&&(e.add=e.clear=e.delete=function(){throw new Error("set is read-only")}),Object.freeze(e),Object.getOwnPropertyNames(e).forEach(t=>{const i=e[t],u=typeof i;(u==="object"||u==="function")&&!Object.isFrozen(i)&&xe(i)}),e}class he{constructor(t){t.data===void 0&&(t.data={}),this.data=t.data,this.isMatchIgnored=!1}ignoreMatch(){this.isMatchIgnored=!0}}function we(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")}function B(e,...t){const i=Object.create(null);for(const u in e)i[u]=e[u];return t.forEach(function(u){for(const b in u)i[b]=u[b]}),i}const qe="</span>",pe=e=>!!e.scope,Qe=(e,{prefix:t})=>{if(e.startsWith("language:"))return e.replace("language:","language-");if(e.includes(".")){const i=e.split(".");return[`${t}${i.shift()}`,...i.map((u,b)=>`${u}${"_".repeat(b+1)}`)].join(" ")}return`${t}${e}`};class me{constructor(t,i){this.buffer="",this.classPrefix=i.classPrefix,t.walk(this)}addText(t){this.buffer+=we(t)}openNode(t){if(!pe(t))return;const i=Qe(t.scope,{prefix:this.classPrefix});this.span(i)}closeNode(t){pe(t)&&(this.buffer+=qe)}value(){return this.buffer}span(t){this.buffer+=`<span class="${t}">`}}const de=(e={})=>{const t={children:[]};return Object.assign(t,e),t};class te{constructor(){this.rootNode=de(),this.stack=[this.rootNode]}get top(){return this.stack[this.stack.length-1]}get root(){return this.rootNode}add(t){this.top.children.push(t)}openNode(t){const i=de({scope:t});this.add(i),this.stack.push(i)}closeNode(){if(this.stack.length>1)return this.stack.pop()}closeAllNodes(){for(;this.closeNode(););}toJSON(){return JSON.stringify(this.rootNode,null,4)}walk(t){return this.constructor._walk(t,this.rootNode)}static _walk(t,i){return typeof i=="string"?t.addText(i):i.children&&(t.openNode(i),i.children.forEach(u=>this._walk(t,u)),t.closeNode(i)),t}static _collapse(t){typeof t!="string"&&t.children&&(t.children.every(i=>typeof i=="string")?t.children=[t.children.join("")]:t.children.forEach(i=>{te._collapse(i)}))}}class et extends te{constructor(t){super(),this.options=t}addText(t){t!==""&&this.add(t)}startScope(t){this.openNode(t)}endScope(){this.closeNode()}__addSublanguage(t,i){const u=t.root;i&&(u.scope=`language:${i}`),this.add(u)}toHTML(){return new me(this,this.options).value()}finalize(){return this.closeAllNodes(),!0}}function P(e){return e?typeof e=="string"?e:e.source:null}function Oe(e){return C("(?=",e,")")}function tt(e){return C("(?:",e,")*")}function nt(e){return C("(?:",e,")?")}function C(...e){return e.map(i=>P(i)).join("")}function it(e){const t=e[e.length-1];return typeof t=="object"&&t.constructor===Object?(e.splice(e.length-1,1),t):{}}function ne(...e){return"("+(it(e).capture?"":"?:")+e.map(u=>P(u)).join("|")+")"}function Re(e){return new RegExp(e.toString()+"|").exec("").length-1}function st(e,t){const i=e&&e.exec(t);return i&&i.index===0}const rt=/\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;function ie(e,{joinWith:t}){let i=0;return e.map(u=>{i+=1;const b=i;let _=P(u),c="";for(;_.length>0;){const r=rt.exec(_);if(!r){c+=_;break}c+=_.substring(0,r.index),_=_.substring(r.index+r[0].length),r[0][0]==="\\"&&r[1]?c+="\\"+String(Number(r[1])+b):(c+=r[0],r[0]==="("&&i++)}return c}).map(u=>`(${u})`).join(t)}const ct=/\b\B/,ye="[a-zA-Z]\\w*",se="[a-zA-Z_]\\w*",Se="\\b\\d+(\\.\\d+)?",Ne="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",Ae="\\b(0b[01]+)",ot="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",at=(e={})=>{const t=/^#![ ]*\//;return e.binary&&(e.begin=C(t,/.*\b/,e.binary,/\b.*/)),B({scope:"meta",begin:t,end:/$/,relevance:0,"on:begin":(i,u)=>{i.index!==0&&u.ignoreMatch()}},e)},U={begin:"\\\\[\\s\\S]",relevance:0},lt={scope:"string",begin:"'",end:"'",illegal:"\\n",contains:[U]},ut={scope:"string",begin:'"',end:'"',illegal:"\\n",contains:[U]},ft={begin:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},Y=function(e,t,i={}){const u=B({scope:"comment",begin:e,end:t,contains:[]},i);u.contains.push({scope:"doctag",begin:"[ ]*(?=(TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):)",end:/(TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):/,excludeBegin:!0,relevance:0});const b=ne("I","a","is","so","us","to","at","if","in","it","on",/[A-Za-z]+['](d|ve|re|ll|t|s|n)/,/[A-Za-z]+[-][a-z]+/,/[A-Za-z][a-z]{2,}/);return u.contains.push({begin:C(/[ ]+/,"(",b,/[.]?[:]?([.][ ]|[ ])/,"){3}")}),u},gt=Y("//","$"),ht=Y("/\\*","\\*/"),pt=Y("#","$"),dt={scope:"number",begin:Se,relevance:0},Et={scope:"number",begin:Ne,relevance:0},bt={scope:"number",begin:Ae,relevance:0},_t={scope:"regexp",begin:/\/(?=[^/\n]*\/)/,end:/\/[gimuy]*/,contains:[U,{begin:/\[/,end:/\]/,relevance:0,contains:[U]}]},Mt={scope:"title",begin:ye,relevance:0},xt={scope:"title",begin:se,relevance:0},wt={begin:"\\.\\s*"+se,relevance:0},Ot=function(e){return Object.assign(e,{"on:begin":(t,i)=>{i.data._beginMatch=t[1]},"on:end":(t,i)=>{i.data._beginMatch!==t[1]&&i.ignoreMatch()}})};var z=Object.freeze({__proto__:null,APOS_STRING_MODE:lt,BACKSLASH_ESCAPE:U,BINARY_NUMBER_MODE:bt,BINARY_NUMBER_RE:Ae,COMMENT:Y,C_BLOCK_COMMENT_MODE:ht,C_LINE_COMMENT_MODE:gt,C_NUMBER_MODE:Et,C_NUMBER_RE:Ne,END_SAME_AS_BEGIN:Ot,HASH_COMMENT_MODE:pt,IDENT_RE:ye,MATCH_NOTHING_RE:ct,METHOD_GUARD:wt,NUMBER_MODE:dt,NUMBER_RE:Se,PHRASAL_WORDS_MODE:ft,QUOTE_STRING_MODE:ut,REGEXP_MODE:_t,RE_STARTERS_RE:ot,SHEBANG:at,TITLE_MODE:Mt,UNDERSCORE_IDENT_RE:se,UNDERSCORE_TITLE_MODE:xt});function Rt(e,t){e.input[e.index-1]==="."&&t.ignoreMatch()}function yt(e,t){e.className!==void 0&&(e.scope=e.className,delete e.className)}function St(e,t){t&&e.beginKeywords&&(e.begin="\\b("+e.beginKeywords.split(" ").join("|")+")(?!\\.)(?=\\b|\\s)",e.__beforeBegin=Rt,e.keywords=e.keywords||e.beginKeywords,delete e.beginKeywords,e.relevance===void 0&&(e.relevance=0))}function Nt(e,t){Array.isArray(e.illegal)&&(e.illegal=ne(...e.illegal))}function At(e,t){if(e.match){if(e.begin||e.end)throw new Error("begin & end are not supported with match");e.begin=e.match,delete e.match}}function kt(e,t){e.relevance===void 0&&(e.relevance=1)}const Tt=(e,t)=>{if(!e.beforeMatch)return;if(e.starts)throw new Error("beforeMatch cannot be used with starts");const i=Object.assign({},e);Object.keys(e).forEach(u=>{delete e[u]}),e.keywords=i.keywords,e.begin=C(i.beforeMatch,Oe(i.begin)),e.starts={relevance:0,contains:[Object.assign(i,{endsParent:!0})]},e.relevance=0,delete i.beforeMatch},It=["of","and","for","in","not","or","if","then","parent","list","value"],Bt="keyword";function ke(e,t,i=Bt){const u=Object.create(null);return typeof e=="string"?b(i,e.split(" ")):Array.isArray(e)?b(i,e):Object.keys(e).forEach(function(_){Object.assign(u,ke(e[_],t,_))}),u;function b(_,c){t&&(c=c.map(r=>r.toLowerCase())),c.forEach(function(r){const l=r.split("|");u[l[0]]=[_,Dt(l[0],l[1])]})}}function Dt(e,t){return t?Number(t):vt(e)?0:1}function vt(e){return It.includes(e.toLowerCase())}const Ee={},v=e=>{console.error(e)},be=(e,...t)=>{console.log(`WARN: ${e}`,...t)},L=(e,t)=>{Ee[`${e}/${t}`]||(console.log(`Deprecated as of ${e}. ${t}`),Ee[`${e}/${t}`]=!0)},X=new Error;function Te(e,t,{key:i}){let u=0;const b=e[i],_={},c={};for(let r=1;r<=t.length;r++)c[r+u]=b[r],_[r+u]=!0,u+=Re(t[r-1]);e[i]=c,e[i]._emit=_,e[i]._multi=!0}function Ct(e){if(Array.isArray(e.begin)){if(e.skip||e.excludeBegin||e.returnBegin)throw v("skip, excludeBegin, returnBegin not compatible with beginScope: {}"),X;if(typeof e.beginScope!="object"||e.beginScope===null)throw v("beginScope must be object"),X;Te(e,e.begin,{key:"beginScope"}),e.begin=ie(e.begin,{joinWith:""})}}function Lt(e){if(Array.isArray(e.end)){if(e.skip||e.excludeEnd||e.returnEnd)throw v("skip, excludeEnd, returnEnd not compatible with endScope: {}"),X;if(typeof e.endScope!="object"||e.endScope===null)throw v("endScope must be object"),X;Te(e,e.end,{key:"endScope"}),e.end=ie(e.end,{joinWith:""})}}function Ht(e){e.scope&&typeof e.scope=="object"&&e.scope!==null&&(e.beginScope=e.scope,delete e.scope)}function jt(e){Ht(e),typeof e.beginScope=="string"&&(e.beginScope={_wrap:e.beginScope}),typeof e.endScope=="string"&&(e.endScope={_wrap:e.endScope}),Ct(e),Lt(e)}function Pt(e){function t(c,r){return new RegExp(P(c),"m"+(e.case_insensitive?"i":"")+(e.unicodeRegex?"u":"")+(r?"g":""))}class i{constructor(){this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}addRule(r,l){l.position=this.position++,this.matchIndexes[this.matchAt]=l,this.regexes.push([l,r]),this.matchAt+=Re(r)+1}compile(){this.regexes.length===0&&(this.exec=()=>null);const r=this.regexes.map(l=>l[1]);this.matcherRe=t(ie(r,{joinWith:"|"}),!0),this.lastIndex=0}exec(r){this.matcherRe.lastIndex=this.lastIndex;const l=this.matcherRe.exec(r);if(!l)return null;const w=l.findIndex((j,Z)=>Z>0&&j!==void 0),M=this.matchIndexes[w];return l.splice(0,w),Object.assign(l,M)}}class u{constructor(){this.rules=[],this.multiRegexes=[],this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(r){if(this.multiRegexes[r])return this.multiRegexes[r];const l=new i;return this.rules.slice(r).forEach(([w,M])=>l.addRule(w,M)),l.compile(),this.multiRegexes[r]=l,l}resumingScanAtSamePosition(){return this.regexIndex!==0}considerAll(){this.regexIndex=0}addRule(r,l){this.rules.push([r,l]),l.type==="begin"&&this.count++}exec(r){const l=this.getMatcher(this.regexIndex);l.lastIndex=this.lastIndex;let w=l.exec(r);if(this.resumingScanAtSamePosition()&&!(w&&w.index===this.lastIndex)){const M=this.getMatcher(0);M.lastIndex=this.lastIndex+1,w=M.exec(r)}return w&&(this.regexIndex+=w.position+1,this.regexIndex===this.count&&this.considerAll()),w}}function b(c){const r=new u;return c.contains.forEach(l=>r.addRule(l.begin,{rule:l,type:"begin"})),c.terminatorEnd&&r.addRule(c.terminatorEnd,{type:"end"}),c.illegal&&r.addRule(c.illegal,{type:"illegal"}),r}function _(c,r){const l=c;if(c.isCompiled)return l;[yt,At,jt,Tt].forEach(M=>M(c,r)),e.compilerExtensions.forEach(M=>M(c,r)),c.__beforeBegin=null,[St,Nt,kt].forEach(M=>M(c,r)),c.isCompiled=!0;let w=null;return typeof c.keywords=="object"&&c.keywords.$pattern&&(c.keywords=Object.assign({},c.keywords),w=c.keywords.$pattern,delete c.keywords.$pattern),w=w||/\w+/,c.keywords&&(c.keywords=ke(c.keywords,e.case_insensitive)),l.keywordPatternRe=t(w,!0),r&&(c.begin||(c.begin=/\B|\b/),l.beginRe=t(l.begin),!c.end&&!c.endsWithParent&&(c.end=/\B|\b/),c.end&&(l.endRe=t(l.end)),l.terminatorEnd=P(l.end)||"",c.endsWithParent&&r.terminatorEnd&&(l.terminatorEnd+=(c.end?"|":"")+r.terminatorEnd)),c.illegal&&(l.illegalRe=t(c.illegal)),c.contains||(c.contains=[]),c.contains=[].concat(...c.contains.map(function(M){return Ut(M==="self"?c:M)})),c.contains.forEach(function(M){_(M,l)}),c.starts&&_(c.starts,r),l.matcher=b(l),l}if(e.compilerExtensions||(e.compilerExtensions=[]),e.contains&&e.contains.includes("self"))throw new Error("ERR: contains `self` is not supported at the top-level of a language.  See documentation.");return e.classNameAliases=B(e.classNameAliases||{}),_(e)}function Ie(e){return e?e.endsWithParent||Ie(e.starts):!1}function Ut(e){return e.variants&&!e.cachedVariants&&(e.cachedVariants=e.variants.map(function(t){return B(e,{variants:null},t)})),e.cachedVariants?e.cachedVariants:Ie(e)?B(e,{starts:e.starts?B(e.starts):null}):Object.isFrozen(e)?B(e):e}var $t="11.11.1";class Gt extends Error{constructor(t,i){super(t),this.name="HTMLInjectionError",this.html=i}}const ee=we,_e=B,Me=Symbol("nomatch"),Wt=7,Be=function(e){const t=Object.create(null),i=Object.create(null),u=[];let b=!0;const _="Could not find the language '{}', did you forget to load/include a language module?",c={disableAutodetect:!0,name:"Plain text",contains:[]};let r={ignoreUnescapedHTML:!1,throwUnescapedHTML:!1,noHighlightRe:/^(no-?highlight)$/i,languageDetectRe:/\blang(?:uage)?-([\w-]+)\b/i,classPrefix:"hljs-",cssSelector:"pre code",languages:null,__emitter:et};function l(n){return r.noHighlightRe.test(n)}function w(n){let a=n.className+" ";a+=n.parentNode?n.parentNode.className:"";const h=r.languageDetectRe.exec(a);if(h){const d=T(h[1]);return d||(be(_.replace("{}",h[1])),be("Falling back to no-highlight mode for this block.",n)),d?h[1]:"no-highlight"}return a.split(/\s+/).find(d=>l(d)||T(d))}function M(n,a,h){let d="",x="";typeof a=="object"?(d=n,h=a.ignoreIllegals,x=a.language):(L("10.7.0","highlight(lang, code, ...args) has been deprecated."),L("10.7.0",`Please use highlight(code, options) instead.
+import{g as Ve}from"./index-BvVlQxBg.js";function xe(e){return e instanceof Map?e.clear=e.delete=e.set=function(){throw new Error("map is read-only")}:e instanceof Set&&(e.add=e.clear=e.delete=function(){throw new Error("set is read-only")}),Object.freeze(e),Object.getOwnPropertyNames(e).forEach(t=>{const i=e[t],u=typeof i;(u==="object"||u==="function")&&!Object.isFrozen(i)&&xe(i)}),e}class he{constructor(t){t.data===void 0&&(t.data={}),this.data=t.data,this.isMatchIgnored=!1}ignoreMatch(){this.isMatchIgnored=!0}}function we(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")}function B(e,...t){const i=Object.create(null);for(const u in e)i[u]=e[u];return t.forEach(function(u){for(const b in u)i[b]=u[b]}),i}const qe="</span>",pe=e=>!!e.scope,Qe=(e,{prefix:t})=>{if(e.startsWith("language:"))return e.replace("language:","language-");if(e.includes(".")){const i=e.split(".");return[`${t}${i.shift()}`,...i.map((u,b)=>`${u}${"_".repeat(b+1)}`)].join(" ")}return`${t}${e}`};class me{constructor(t,i){this.buffer="",this.classPrefix=i.classPrefix,t.walk(this)}addText(t){this.buffer+=we(t)}openNode(t){if(!pe(t))return;const i=Qe(t.scope,{prefix:this.classPrefix});this.span(i)}closeNode(t){pe(t)&&(this.buffer+=qe)}value(){return this.buffer}span(t){this.buffer+=`<span class="${t}">`}}const de=(e={})=>{const t={children:[]};return Object.assign(t,e),t};class te{constructor(){this.rootNode=de(),this.stack=[this.rootNode]}get top(){return this.stack[this.stack.length-1]}get root(){return this.rootNode}add(t){this.top.children.push(t)}openNode(t){const i=de({scope:t});this.add(i),this.stack.push(i)}closeNode(){if(this.stack.length>1)return this.stack.pop()}closeAllNodes(){for(;this.closeNode(););}toJSON(){return JSON.stringify(this.rootNode,null,4)}walk(t){return this.constructor._walk(t,this.rootNode)}static _walk(t,i){return typeof i=="string"?t.addText(i):i.children&&(t.openNode(i),i.children.forEach(u=>this._walk(t,u)),t.closeNode(i)),t}static _collapse(t){typeof t!="string"&&t.children&&(t.children.every(i=>typeof i=="string")?t.children=[t.children.join("")]:t.children.forEach(i=>{te._collapse(i)}))}}class et extends te{constructor(t){super(),this.options=t}addText(t){t!==""&&this.add(t)}startScope(t){this.openNode(t)}endScope(){this.closeNode()}__addSublanguage(t,i){const u=t.root;i&&(u.scope=`language:${i}`),this.add(u)}toHTML(){return new me(this,this.options).value()}finalize(){return this.closeAllNodes(),!0}}function P(e){return e?typeof e=="string"?e:e.source:null}function Oe(e){return C("(?=",e,")")}function tt(e){return C("(?:",e,")*")}function nt(e){return C("(?:",e,")?")}function C(...e){return e.map(i=>P(i)).join("")}function it(e){const t=e[e.length-1];return typeof t=="object"&&t.constructor===Object?(e.splice(e.length-1,1),t):{}}function ne(...e){return"("+(it(e).capture?"":"?:")+e.map(u=>P(u)).join("|")+")"}function Re(e){return new RegExp(e.toString()+"|").exec("").length-1}function st(e,t){const i=e&&e.exec(t);return i&&i.index===0}const rt=/\[(?:[^\\\]]|\\.)*\]|\(\??|\\([1-9][0-9]*)|\\./;function ie(e,{joinWith:t}){let i=0;return e.map(u=>{i+=1;const b=i;let _=P(u),c="";for(;_.length>0;){const r=rt.exec(_);if(!r){c+=_;break}c+=_.substring(0,r.index),_=_.substring(r.index+r[0].length),r[0][0]==="\\"&&r[1]?c+="\\"+String(Number(r[1])+b):(c+=r[0],r[0]==="("&&i++)}return c}).map(u=>`(${u})`).join(t)}const ct=/\b\B/,ye="[a-zA-Z]\\w*",se="[a-zA-Z_]\\w*",Se="\\b\\d+(\\.\\d+)?",Ne="(-?)(\\b0[xX][a-fA-F0-9]+|(\\b\\d+(\\.\\d*)?|\\.\\d+)([eE][-+]?\\d+)?)",Ae="\\b(0b[01]+)",ot="!|!=|!==|%|%=|&|&&|&=|\\*|\\*=|\\+|\\+=|,|-|-=|/=|/|:|;|<<|<<=|<=|<|===|==|=|>>>=|>>=|>=|>>>|>>|>|\\?|\\[|\\{|\\(|\\^|\\^=|\\||\\|=|\\|\\||~",at=(e={})=>{const t=/^#![ ]*\//;return e.binary&&(e.begin=C(t,/.*\b/,e.binary,/\b.*/)),B({scope:"meta",begin:t,end:/$/,relevance:0,"on:begin":(i,u)=>{i.index!==0&&u.ignoreMatch()}},e)},U={begin:"\\\\[\\s\\S]",relevance:0},lt={scope:"string",begin:"'",end:"'",illegal:"\\n",contains:[U]},ut={scope:"string",begin:'"',end:'"',illegal:"\\n",contains:[U]},ft={begin:/\b(a|an|the|are|I'm|isn't|don't|doesn't|won't|but|just|should|pretty|simply|enough|gonna|going|wtf|so|such|will|you|your|they|like|more)\b/},Y=function(e,t,i={}){const u=B({scope:"comment",begin:e,end:t,contains:[]},i);u.contains.push({scope:"doctag",begin:"[ ]*(?=(TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):)",end:/(TODO|FIXME|NOTE|BUG|OPTIMIZE|HACK|XXX):/,excludeBegin:!0,relevance:0});const b=ne("I","a","is","so","us","to","at","if","in","it","on",/[A-Za-z]+['](d|ve|re|ll|t|s|n)/,/[A-Za-z]+[-][a-z]+/,/[A-Za-z][a-z]{2,}/);return u.contains.push({begin:C(/[ ]+/,"(",b,/[.]?[:]?([.][ ]|[ ])/,"){3}")}),u},gt=Y("//","$"),ht=Y("/\\*","\\*/"),pt=Y("#","$"),dt={scope:"number",begin:Se,relevance:0},Et={scope:"number",begin:Ne,relevance:0},bt={scope:"number",begin:Ae,relevance:0},_t={scope:"regexp",begin:/\/(?=[^/\n]*\/)/,end:/\/[gimuy]*/,contains:[U,{begin:/\[/,end:/\]/,relevance:0,contains:[U]}]},Mt={scope:"title",begin:ye,relevance:0},xt={scope:"title",begin:se,relevance:0},wt={begin:"\\.\\s*"+se,relevance:0},Ot=function(e){return Object.assign(e,{"on:begin":(t,i)=>{i.data._beginMatch=t[1]},"on:end":(t,i)=>{i.data._beginMatch!==t[1]&&i.ignoreMatch()}})};var z=Object.freeze({__proto__:null,APOS_STRING_MODE:lt,BACKSLASH_ESCAPE:U,BINARY_NUMBER_MODE:bt,BINARY_NUMBER_RE:Ae,COMMENT:Y,C_BLOCK_COMMENT_MODE:ht,C_LINE_COMMENT_MODE:gt,C_NUMBER_MODE:Et,C_NUMBER_RE:Ne,END_SAME_AS_BEGIN:Ot,HASH_COMMENT_MODE:pt,IDENT_RE:ye,MATCH_NOTHING_RE:ct,METHOD_GUARD:wt,NUMBER_MODE:dt,NUMBER_RE:Se,PHRASAL_WORDS_MODE:ft,QUOTE_STRING_MODE:ut,REGEXP_MODE:_t,RE_STARTERS_RE:ot,SHEBANG:at,TITLE_MODE:Mt,UNDERSCORE_IDENT_RE:se,UNDERSCORE_TITLE_MODE:xt});function Rt(e,t){e.input[e.index-1]==="."&&t.ignoreMatch()}function yt(e,t){e.className!==void 0&&(e.scope=e.className,delete e.className)}function St(e,t){t&&e.beginKeywords&&(e.begin="\\b("+e.beginKeywords.split(" ").join("|")+")(?!\\.)(?=\\b|\\s)",e.__beforeBegin=Rt,e.keywords=e.keywords||e.beginKeywords,delete e.beginKeywords,e.relevance===void 0&&(e.relevance=0))}function Nt(e,t){Array.isArray(e.illegal)&&(e.illegal=ne(...e.illegal))}function At(e,t){if(e.match){if(e.begin||e.end)throw new Error("begin & end are not supported with match");e.begin=e.match,delete e.match}}function kt(e,t){e.relevance===void 0&&(e.relevance=1)}const Tt=(e,t)=>{if(!e.beforeMatch)return;if(e.starts)throw new Error("beforeMatch cannot be used with starts");const i=Object.assign({},e);Object.keys(e).forEach(u=>{delete e[u]}),e.keywords=i.keywords,e.begin=C(i.beforeMatch,Oe(i.begin)),e.starts={relevance:0,contains:[Object.assign(i,{endsParent:!0})]},e.relevance=0,delete i.beforeMatch},It=["of","and","for","in","not","or","if","then","parent","list","value"],Bt="keyword";function ke(e,t,i=Bt){const u=Object.create(null);return typeof e=="string"?b(i,e.split(" ")):Array.isArray(e)?b(i,e):Object.keys(e).forEach(function(_){Object.assign(u,ke(e[_],t,_))}),u;function b(_,c){t&&(c=c.map(r=>r.toLowerCase())),c.forEach(function(r){const l=r.split("|");u[l[0]]=[_,Dt(l[0],l[1])]})}}function Dt(e,t){return t?Number(t):vt(e)?0:1}function vt(e){return It.includes(e.toLowerCase())}const Ee={},v=e=>{console.error(e)},be=(e,...t)=>{console.log(`WARN: ${e}`,...t)},L=(e,t)=>{Ee[`${e}/${t}`]||(console.log(`Deprecated as of ${e}. ${t}`),Ee[`${e}/${t}`]=!0)},X=new Error;function Te(e,t,{key:i}){let u=0;const b=e[i],_={},c={};for(let r=1;r<=t.length;r++)c[r+u]=b[r],_[r+u]=!0,u+=Re(t[r-1]);e[i]=c,e[i]._emit=_,e[i]._multi=!0}function Ct(e){if(Array.isArray(e.begin)){if(e.skip||e.excludeBegin||e.returnBegin)throw v("skip, excludeBegin, returnBegin not compatible with beginScope: {}"),X;if(typeof e.beginScope!="object"||e.beginScope===null)throw v("beginScope must be object"),X;Te(e,e.begin,{key:"beginScope"}),e.begin=ie(e.begin,{joinWith:""})}}function Lt(e){if(Array.isArray(e.end)){if(e.skip||e.excludeEnd||e.returnEnd)throw v("skip, excludeEnd, returnEnd not compatible with endScope: {}"),X;if(typeof e.endScope!="object"||e.endScope===null)throw v("endScope must be object"),X;Te(e,e.end,{key:"endScope"}),e.end=ie(e.end,{joinWith:""})}}function Ht(e){e.scope&&typeof e.scope=="object"&&e.scope!==null&&(e.beginScope=e.scope,delete e.scope)}function jt(e){Ht(e),typeof e.beginScope=="string"&&(e.beginScope={_wrap:e.beginScope}),typeof e.endScope=="string"&&(e.endScope={_wrap:e.endScope}),Ct(e),Lt(e)}function Pt(e){function t(c,r){return new RegExp(P(c),"m"+(e.case_insensitive?"i":"")+(e.unicodeRegex?"u":"")+(r?"g":""))}class i{constructor(){this.matchIndexes={},this.regexes=[],this.matchAt=1,this.position=0}addRule(r,l){l.position=this.position++,this.matchIndexes[this.matchAt]=l,this.regexes.push([l,r]),this.matchAt+=Re(r)+1}compile(){this.regexes.length===0&&(this.exec=()=>null);const r=this.regexes.map(l=>l[1]);this.matcherRe=t(ie(r,{joinWith:"|"}),!0),this.lastIndex=0}exec(r){this.matcherRe.lastIndex=this.lastIndex;const l=this.matcherRe.exec(r);if(!l)return null;const w=l.findIndex((j,Z)=>Z>0&&j!==void 0),M=this.matchIndexes[w];return l.splice(0,w),Object.assign(l,M)}}class u{constructor(){this.rules=[],this.multiRegexes=[],this.count=0,this.lastIndex=0,this.regexIndex=0}getMatcher(r){if(this.multiRegexes[r])return this.multiRegexes[r];const l=new i;return this.rules.slice(r).forEach(([w,M])=>l.addRule(w,M)),l.compile(),this.multiRegexes[r]=l,l}resumingScanAtSamePosition(){return this.regexIndex!==0}considerAll(){this.regexIndex=0}addRule(r,l){this.rules.push([r,l]),l.type==="begin"&&this.count++}exec(r){const l=this.getMatcher(this.regexIndex);l.lastIndex=this.lastIndex;let w=l.exec(r);if(this.resumingScanAtSamePosition()&&!(w&&w.index===this.lastIndex)){const M=this.getMatcher(0);M.lastIndex=this.lastIndex+1,w=M.exec(r)}return w&&(this.regexIndex+=w.position+1,this.regexIndex===this.count&&this.considerAll()),w}}function b(c){const r=new u;return c.contains.forEach(l=>r.addRule(l.begin,{rule:l,type:"begin"})),c.terminatorEnd&&r.addRule(c.terminatorEnd,{type:"end"}),c.illegal&&r.addRule(c.illegal,{type:"illegal"}),r}function _(c,r){const l=c;if(c.isCompiled)return l;[yt,At,jt,Tt].forEach(M=>M(c,r)),e.compilerExtensions.forEach(M=>M(c,r)),c.__beforeBegin=null,[St,Nt,kt].forEach(M=>M(c,r)),c.isCompiled=!0;let w=null;return typeof c.keywords=="object"&&c.keywords.$pattern&&(c.keywords=Object.assign({},c.keywords),w=c.keywords.$pattern,delete c.keywords.$pattern),w=w||/\w+/,c.keywords&&(c.keywords=ke(c.keywords,e.case_insensitive)),l.keywordPatternRe=t(w,!0),r&&(c.begin||(c.begin=/\B|\b/),l.beginRe=t(l.begin),!c.end&&!c.endsWithParent&&(c.end=/\B|\b/),c.end&&(l.endRe=t(l.end)),l.terminatorEnd=P(l.end)||"",c.endsWithParent&&r.terminatorEnd&&(l.terminatorEnd+=(c.end?"|":"")+r.terminatorEnd)),c.illegal&&(l.illegalRe=t(c.illegal)),c.contains||(c.contains=[]),c.contains=[].concat(...c.contains.map(function(M){return Ut(M==="self"?c:M)})),c.contains.forEach(function(M){_(M,l)}),c.starts&&_(c.starts,r),l.matcher=b(l),l}if(e.compilerExtensions||(e.compilerExtensions=[]),e.contains&&e.contains.includes("self"))throw new Error("ERR: contains `self` is not supported at the top-level of a language.  See documentation.");return e.classNameAliases=B(e.classNameAliases||{}),_(e)}function Ie(e){return e?e.endsWithParent||Ie(e.starts):!1}function Ut(e){return e.variants&&!e.cachedVariants&&(e.cachedVariants=e.variants.map(function(t){return B(e,{variants:null},t)})),e.cachedVariants?e.cachedVariants:Ie(e)?B(e,{starts:e.starts?B(e.starts):null}):Object.isFrozen(e)?B(e):e}var $t="11.11.1";class Gt extends Error{constructor(t,i){super(t),this.name="HTMLInjectionError",this.html=i}}const ee=we,_e=B,Me=Symbol("nomatch"),Wt=7,Be=function(e){const t=Object.create(null),i=Object.create(null),u=[];let b=!0;const _="Could not find the language '{}', did you forget to load/include a language module?",c={disableAutodetect:!0,name:"Plain text",contains:[]};let r={ignoreUnescapedHTML:!1,throwUnescapedHTML:!1,noHighlightRe:/^(no-?highlight)$/i,languageDetectRe:/\blang(?:uage)?-([\w-]+)\b/i,classPrefix:"hljs-",cssSelector:"pre code",languages:null,__emitter:et};function l(n){return r.noHighlightRe.test(n)}function w(n){let a=n.className+" ";a+=n.parentNode?n.parentNode.className:"";const h=r.languageDetectRe.exec(a);if(h){const d=T(h[1]);return d||(be(_.replace("{}",h[1])),be("Falling back to no-highlight mode for this block.",n)),d?h[1]:"no-highlight"}return a.split(/\s+/).find(d=>l(d)||T(d))}function M(n,a,h){let d="",x="";typeof a=="object"?(d=n,h=a.ignoreIllegals,x=a.language):(L("10.7.0","highlight(lang, code, ...args) has been deprecated."),L("10.7.0",`Please use highlight(code, options) instead.
 https://github.com/highlightjs/highlight.js/issues/2277`),x=n,d=a),h===void 0&&(h=!0);const S={code:d,language:x};G("before:highlight",S);const I=S.result?S.result:j(S.language,S.code,h);return I.code=S.code,G("after:highlight",I),I}function j(n,a,h,d){const x=Object.create(null);function S(s,o){return s.keywords[o]}function I(){if(!f.keywords){O.addText(E);return}let s=0;f.keywordPatternRe.lastIndex=0;let o=f.keywordPatternRe.exec(E),g="";for(;o;){g+=E.substring(s,o.index);const p=A.case_insensitive?o[0].toLowerCase():o[0],R=S(f,p);if(R){const[k,Ze]=R;if(O.addText(g),g="",x[p]=(x[p]||0)+1,x[p]<=Wt&&(F+=Ze),k.startsWith("_"))g+=o[0];else{const Je=A.classNameAliases[k]||k;N(o[0],Je)}}else g+=o[0];s=f.keywordPatternRe.lastIndex,o=f.keywordPatternRe.exec(E)}g+=E.substring(s),O.addText(g)}function W(){if(E==="")return;let s=null;if(typeof f.subLanguage=="string"){if(!t[f.subLanguage]){O.addText(E);return}s=j(f.subLanguage,E,!0,ge[f.subLanguage]),ge[f.subLanguage]=s._top}else s=J(E,f.subLanguage.length?f.subLanguage:null);f.relevance>0&&(F+=s.relevance),O.__addSublanguage(s._emitter,s.language)}function y(){f.subLanguage!=null?W():I(),E=""}function N(s,o){s!==""&&(O.startScope(o),O.addText(s),O.endScope())}function ae(s,o){let g=1;const p=o.length-1;for(;g<=p;){if(!s._emit[g]){g++;continue}const R=A.classNameAliases[s[g]]||s[g],k=o[g];R?N(k,R):(E=k,I(),E=""),g++}}function le(s,o){return s.scope&&typeof s.scope=="string"&&O.openNode(A.classNameAliases[s.scope]||s.scope),s.beginScope&&(s.beginScope._wrap?(N(E,A.classNameAliases[s.beginScope._wrap]||s.beginScope._wrap),E=""):s.beginScope._multi&&(ae(s.beginScope,o),E="")),f=Object.create(s,{parent:{value:f}}),f}function ue(s,o,g){let p=st(s.endRe,g);if(p){if(s["on:end"]){const R=new he(s);s["on:end"](o,R),R.isMatchIgnored&&(p=!1)}if(p){for(;s.endsParent&&s.parent;)s=s.parent;return s}}if(s.endsWithParent)return ue(s.parent,o,g)}function Ke(s){return f.matcher.regexIndex===0?(E+=s[0],1):(m=!0,0)}function Fe(s){const o=s[0],g=s.rule,p=new he(g),R=[g.__beforeBegin,g["on:begin"]];for(const k of R)if(k&&(k(s,p),p.isMatchIgnored))return Ke(o);return g.skip?E+=o:(g.excludeBegin&&(E+=o),y(),!g.returnBegin&&!g.excludeBegin&&(E=o)),le(g,s),g.returnBegin?0:o.length}function ze(s){const o=s[0],g=a.substring(s.index),p=ue(f,s,g);if(!p)return Me;const R=f;f.endScope&&f.endScope._wrap?(y(),N(o,f.endScope._wrap)):f.endScope&&f.endScope._multi?(y(),ae(f.endScope,s)):R.skip?E+=o:(R.returnEnd||R.excludeEnd||(E+=o),y(),R.excludeEnd&&(E=o));do f.scope&&O.closeNode(),!f.skip&&!f.subLanguage&&(F+=f.relevance),f=f.parent;while(f!==p.parent);return p.starts&&le(p.starts,s),R.returnEnd?0:o.length}function Xe(){const s=[];for(let o=f;o!==A;o=o.parent)o.scope&&s.unshift(o.scope);s.forEach(o=>O.openNode(o))}let K={};function fe(s,o){const g=o&&o[0];if(E+=s,g==null)return y(),0;if(K.type==="begin"&&o.type==="end"&&K.index===o.index&&g===""){if(E+=a.slice(o.index,o.index+1),!b){const p=new Error(`0 width match regex (${n})`);throw p.languageName=n,p.badRule=K.rule,p}return 1}if(K=o,o.type==="begin")return Fe(o);if(o.type==="illegal"&&!h){const p=new Error('Illegal lexeme "'+g+'" for mode "'+(f.scope||"<unnamed>")+'"');throw p.mode=f,p}else if(o.type==="end"){const p=ze(o);if(p!==Me)return p}if(o.type==="illegal"&&g==="")return E+=`
 `,1;if(Q>1e5&&Q>o.index*3)throw new Error("potential infinite loop, way more iterations than matches");return E+=g,g.length}const A=T(n);if(!A)throw v(_.replace("{}",n)),new Error('Unknown language: "'+n+'"');const Ye=Pt(A);let q="",f=d||Ye;const ge={},O=new r.__emitter(r);Xe();let E="",F=0,D=0,Q=0,m=!1;try{if(A.__emitTokens)A.__emitTokens(a,O);else{for(f.matcher.considerAll();;){Q++,m?m=!1:f.matcher.considerAll(),f.matcher.lastIndex=D;const s=f.matcher.exec(a);if(!s)break;const o=a.substring(D,s.index),g=fe(o,s);D=s.index+g}fe(a.substring(D))}return O.finalize(),q=O.toHTML(),{language:n,value:q,relevance:F,illegal:!1,_emitter:O,_top:f}}catch(s){if(s.message&&s.message.includes("Illegal"))return{language:n,value:ee(a),illegal:!0,relevance:0,_illegalBy:{message:s.message,index:D,context:a.slice(D-100,D+100),mode:s.mode,resultSoFar:q},_emitter:O};if(b)return{language:n,value:ee(a),illegal:!1,relevance:0,errorRaised:s,_emitter:O,_top:f};throw s}}function Z(n){const a={value:ee(n),illegal:!1,relevance:0,_top:c,_emitter:new r.__emitter(r)};return a._emitter.addText(n),a}function J(n,a){a=a||r.languages||Object.keys(t);const h=Z(n),d=a.filter(T).filter(oe).map(y=>j(y,n,!1));d.unshift(h);const x=d.sort((y,N)=>{if(y.relevance!==N.relevance)return N.relevance-y.relevance;if(y.language&&N.language){if(T(y.language).supersetOf===N.language)return 1;if(T(N.language).supersetOf===y.language)return-1}return 0}),[S,I]=x,W=S;return W.secondBest=I,W}function De(n,a,h){const d=a&&i[a]||h;n.classList.add("hljs"),n.classList.add(`language-${d}`)}function V(n){let a=null;const h=w(n);if(l(h))return;if(G("before:highlightElement",{el:n,language:h}),n.dataset.highlighted){console.log("Element previously highlighted. To highlight again, first unset `dataset.highlighted`.",n);return}if(n.children.length>0&&(r.ignoreUnescapedHTML||(console.warn("One of your code blocks includes unescaped HTML. This is a potentially serious security risk."),console.warn("https://github.com/highlightjs/highlight.js/wiki/security"),console.warn("The element with unescaped HTML:"),console.warn(n)),r.throwUnescapedHTML))throw new Gt("One of your code blocks includes unescaped HTML.",n.innerHTML);a=n;const d=a.textContent,x=h?M(d,{language:h,ignoreIllegals:!0}):J(d);n.innerHTML=x.value,n.dataset.highlighted="yes",De(n,h,x.language),n.result={language:x.language,re:x.relevance,relevance:x.relevance},x.secondBest&&(n.secondBest={language:x.secondBest.language,relevance:x.secondBest.relevance}),G("after:highlightElement",{el:n,result:x,text:d})}function ve(n){r=_e(r,n)}const Ce=()=>{$(),L("10.6.0","initHighlighting() deprecated.  Use highlightAll() now.")};function Le(){$(),L("10.6.0","initHighlightingOnLoad() deprecated.  Use highlightAll() now.")}let re=!1;function $(){function n(){$()}if(document.readyState==="loading"){re||window.addEventListener("DOMContentLoaded",n,!1),re=!0;return}document.querySelectorAll(r.cssSelector).forEach(V)}function He(n,a){let h=null;try{h=a(e)}catch(d){if(v("Language definition for '{}' could not be registered.".replace("{}",n)),b)v(d);else throw d;h=c}h.name||(h.name=n),t[n]=h,h.rawDefinition=a.bind(null,e),h.aliases&&ce(h.aliases,{languageName:n})}function je(n){delete t[n];for(const a of Object.keys(i))i[a]===n&&delete i[a]}function Pe(){return Object.keys(t)}function T(n){return n=(n||"").toLowerCase(),t[n]||t[i[n]]}function ce(n,{languageName:a}){typeof n=="string"&&(n=[n]),n.forEach(h=>{i[h.toLowerCase()]=a})}function oe(n){const a=T(n);return a&&!a.disableAutodetect}function Ue(n){n["before:highlightBlock"]&&!n["before:highlightElement"]&&(n["before:highlightElement"]=a=>{n["before:highlightBlock"](Object.assign({block:a.el},a))}),n["after:highlightBlock"]&&!n["after:highlightElement"]&&(n["after:highlightElement"]=a=>{n["after:highlightBlock"](Object.assign({block:a.el},a))})}function $e(n){Ue(n),u.push(n)}function Ge(n){const a=u.indexOf(n);a!==-1&&u.splice(a,1)}function G(n,a){const h=n;u.forEach(function(d){d[h]&&d[h](a)})}function We(n){return L("10.7.0","highlightBlock will be removed entirely in v12.0"),L("10.7.0","Please use highlightElement now."),V(n)}Object.assign(e,{highlight:M,highlightAuto:J,highlightAll:$,highlightElement:V,highlightBlock:We,configure:ve,initHighlighting:Ce,initHighlightingOnLoad:Le,registerLanguage:He,unregisterLanguage:je,listLanguages:Pe,getLanguage:T,registerAliases:ce,autoDetection:oe,inherit:_e,addPlugin:$e,removePlugin:Ge}),e.debugMode=function(){b=!1},e.safeMode=function(){b=!0},e.versionString=$t,e.regex={concat:C,lookahead:Oe,either:ne,optional:nt,anyNumberOfTimes:tt};for(const n in z)typeof z[n]=="object"&&xe(z[n]);return Object.assign(e,z),e},H=Be({});H.newInstance=()=>Be({});var Kt=H;H.HighlightJS=H;H.default=H;const zt=Ve(Kt);export{zt as HighlightJS,zt as default};