@indigo-gr/claude-code-station 0.3.3 → 0.4.1

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.1] — 2026-11-08
+
+0.4.0 was tagged in the work repository but never published; its changes ship in 0.4.1.
+
+### Added
+- **Version and copyright on screen** — both looks show `ccs v<version>` and `Copyright © INDIGO GROUP LLC.` in the frame's top border (fzf's border label: after the title in the simple look, new in the classic look). The label costs no list row and survives `change-header`. On a narrow terminal the label shortens instead of running over the frame's corners: the title goes first (simple), then the word `Copyright` (`© INDIGO GROUP LLC.`), and the version stays. `ccs --help` prints the copyright too.
+- **Update notice** — when npm's latest is newer than the running version, the classic look prints one line with the upgrade command above the picker. The simple look says so in the list's frame and prints the command after the picker closes. No notice for a prerelease on either side, or when nothing is known about the latest version.
+  - **What goes over the network**: at most once a day (an hour after a failed attempt), a background process sends one HTTPS GET to `https://registry.npmjs.org/-/package/%40indigo-gr%2Fclaude-code-station/dist-tags`. It carries no ccs version, repo, session or machine details. See "Update check" in the README.
+  - **It cannot slow or stop ccs**: the launcher only reads the last answer from `~/.cache/ccs/update-check` and never waits for the request, which has a 3-second limit. Offline, ccs behaves as before.
+  - **Turn it off** with `CCS_NO_UPDATE_CHECK=1` (no request, the cache is not read). `CCS_UPDATE_REGISTRY` points the check at another registry.
+- `author` in `package.json`.
+
+### Changed
+- The copyright holder is now INDIGO GROUP LLC. (`LICENSE`, `package.json`, README, on screen). The license stays MIT.
+- `tput` is no longer required.
+- **Works on npm 12 as is, and needs Node 22** — npm 12 blocks dependency install scripts by default, also for a global install, so with `better-sqlite3` 11 the plain `npm install -g` reported success and left a `ccs` that could not start (this applies to earlier versions of ccs). `better-sqlite3` 13 ships prebuilt native modules, so no script is needed. It requires Node 22 or newer, and so does ccs now (`engines`, `install.sh`, README). On a platform with no prebuilt module, `ccs` says so. An existing `state.db` is reused.
+
+### Fixed
+- **Terminal width** — `tput cols 2>/dev/null` inside `$()` answered 80 at any width, so the classic look's short guide line for narrow terminals never appeared. ccs now asks the terminal with `stty size` (an exported `COLUMNS` wins), so terminals under 80 columns get that short guide line.
+- **Copy install** — without a `package.json` next to `bin/` (`install.sh`, the README's manual install), `ccs` exited with code 2 and no message before doing anything. It now runs as `ccs v0.0.0-dev`, and a copy install gets no update check or notice.
+- **Another package's version** — `ccs` took its version from whatever `package.json` sat above `bin/`, so a copy install could show another project's version. It now reads the file only when its `name` is this package; otherwise, or when the file cannot be read or parsed, it runs as `ccs v0.0.0-dev`.
+- **Simple look**: the no-match message stayed only some of the time, because the guide line overwrote it; it now stays until the search matches again.
+- A scan that fails on opening the cache no longer leaves its lock behind (later scans said "another scan is in progress" for 5 minutes and hid the real error).
+- The install instructions add `~/.claude/scripts` to the end of `PATH`, so it cannot shadow system commands. If you followed the earlier instruction, you may want to change that line in your shell profile.
+
+### Security
+- **A repos.yml field can no longer choose the command** — a tab, newline or unit separator in `icon` moved the row's columns, so picking that repo (or one of its sessions) ran what the field named instead of the repo's command. Icons are now cleaned wherever they are drawn, `ccs-list` drops a row of the wrong shape, and `bin/ccs` refuses a command with shell metacharacters or control characters.
+- **Wildcards in `command`** are passed as written (`claude *` gets the argument `*`). Splitting into words is unchanged.
+- **A session's cwd** with a `..` segment is no longer taken from the session file, so it can neither open outside `$HOME` nor reach the clipboard through `^Y`.
+- **The preview hides secrets before cutting text**, so a key across the cut no longer shows its beginning (messages, `cwd`, `gitBranch`, `version`).
+- **The scan stays inside a repo**: a file in `handoff/` or `pendings/`, or the folder itself, is not read when it is a symlink out of the repo. A symlink that stays inside the repo still works.
+- **The scan runs nothing a repo configures**: git runs with `core.fsmonitor` off and no hooks, and a scan no longer rewrites a repo's index.
+- **Display text** loses C1 controls and text-direction marks too; `description`, `tags` and `icon` are now cleaned in the classic preview as well. Emoji and Japanese text are unchanged.
+
 ## [0.3.3] — 2026-11-06
 
 ### Changed

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Daiske Watanabe
+Copyright (c) 2026 INDIGO GROUP LLC.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,7 +1,7 @@
 # Claude Code Station — ccs
 
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
-[![Node 20+](https://img.shields.io/badge/node-%3E%3D20-brightgreen.svg)](https://nodejs.org/)
+[![Node 22+](https://img.shields.io/badge/node-%3E%3D22-brightgreen.svg)](https://nodejs.org/)
 
 A fast, fzf-powered launcher and session picker for [Claude Code](https://docs.anthropic.com/en/docs/claude-code). Pick a project to launch fresh **or** resume any past session — all from a single fuzzy finder, across every repo you own.
 
@@ -38,7 +38,7 @@ A fast, fzf-powered launcher and session picker for [Claude Code](https://docs.a
 
 ### Prerequisites / 前提条件
 
-- [Node.js](https://nodejs.org/) **20+**
+- [Node.js](https://nodejs.org/) **22+**. `better-sqlite3` ships prebuilt modules for macOS and Linux (glibc, musl) on x64 and arm64; anywhere else it has to be built from source (not tested) / それ以外の環境はソースから作る必要がある（未確認）
 - [fzf](https://github.com/junegunn/fzf) **≥ 0.42.0** — fuzzy finder (the `change-header` binding used by the copy-toast requires 0.42+; released Aug 2023). With **0.45+** Enter on a group header (`launch: false`) keeps the list open; on older fzf it just closes ccs without launching anything / 0.45 以上なら、グループ見出しの上で Enter を押してもリストは開いたまま（それより古い fzf では何も起動せずに閉じる）
   - The friendlier look (`ui: simple`, below) needs **fzf ≥ 0.61.0** (`--ghost`; the frame and labels need 0.58+). On an older fzf ccs opens the classic look and says so in one line / やさしい見た目（`ui: simple`）は fzf 0.61.0 以上。古い fzf ではいつもの見た目で開き、1 行で知らせる
 - [Claude Code](https://docs.anthropic.com/en/docs/claude-code) CLI (`claude`)
@@ -62,7 +62,7 @@ npm install -g @indigo-gr/claude-code-station
 #### From GitHub (latest unreleased) / GitHub直接（未リリース版を使いたい時）
 
 ```bash
-npm install -g github:indigo-gr/claude-code-station
+npm install -g --allow-git=root github:indigo-gr/claude-code-station
 ```
 
 ### Copy install (checkout) / コピーインストール
@@ -84,7 +84,7 @@ cp bin/ccs bin/ccs-*.ts bin/ccs-*.sh ~/.claude/scripts/
 chmod +x ~/.claude/scripts/ccs ~/.claude/scripts/ccs-delete.sh
 
 # Add to ~/.zshrc or ~/.bashrc
-export PATH="$HOME/.claude/scripts:$PATH"
+export PATH="$PATH:$HOME/.claude/scripts"
 ```
 
 ---
@@ -331,6 +331,18 @@ Schema details: [`docs/design/sqlite-schema.md`](docs/design/sqlite-schema.md).
 
 ---
 
+## Update check / 更新の確認
+
+ccs tells you when npm has a newer version. The classic look prints one line with the upgrade command above the picker. The simple look says so in the list's frame and prints the command after the picker closes. / npm に新しいバージョンがあると知らせる。classic は一覧の上に上げ方を 1 行、simple は枠に知らせを出し、閉じた後に上げ方を出す。
+
+- **What is sent, and where** — one HTTPS `GET https://registry.npmjs.org/-/package/%40indigo-gr%2Fclaude-code-station/dist-tags`, at most once a day (an hour after a failed attempt). It carries no ccs version, repo, session or machine details; the registry sees only the request itself, your IP address and Node's default User-Agent. / 送るのは公開情報を読む GET が 1 日に 1 回まで（失敗の後は 1 時間後）。ccs のバージョン・リポジトリ・会話・マシンの情報は送らない。npm が受け取るのはリクエストそのもの・IP アドレス・Node の既定の User-Agent だけ
+- **Never in the way** — the check runs in the background with a 3-second limit and its answer is used on the next launch; startup only reads `~/.cache/ccs/update-check` (or `$XDG_CACHE_HOME/ccs/update-check`). Offline, or when the answer is unusable, ccs behaves as before. HTTP proxy settings are not used, so behind a proxy the check simply fails quietly. / 確認は裏で行い、結果は次の起動で使う。起動を遅らせず、オフラインでも止まらない。プロキシの設定は使わないので、プロキシの内側では確認が静かに失敗する
+- **When there is no notice** — when you are on the latest version or newer, when npm's latest is a prerelease, and when your own version is a prerelease or a copy install (`0.0.0-dev`). A failed check shows no notice of its own, but a version found by an earlier check is still reported. / 最新かそれより新しい時・npm の latest がプレリリースの時・手元がプレリリースかコピーインストールの時は知らせない。確認の失敗だけでは知らせないが、前回までに見つけたバージョンは知らせる
+- **Turn it off** — set `CCS_NO_UPDATE_CHECK=1` (any non-empty value): no request, and the cache is not read. / `CCS_NO_UPDATE_CHECK=1`（空でない値）で止まる。通信せず、キャッシュも読まない
+- **Another registry** — `CCS_UPDATE_REGISTRY=https://registry.example.com` asks that server instead. / `CCS_UPDATE_REGISTRY` で問い合わせ先を替えられる
+
+---
+
 ## Migration from ccr v0.1.x / ccr v0.1.x からの移行
 
 Existing sessions are stored under `~/.claude/projects/*/*.jsonl` — **nothing to migrate manually**. ccs auto-discovers them on first scan.
@@ -403,4 +415,10 @@ Issues and PRs welcome. See [`REVIEW.md`](REVIEW.md) for review standards and [`
 
 ## License / ライセンス
 
-MIT. See [LICENSE](LICENSE).
+MIT. Copyright © INDIGO GROUP LLC. See [LICENSE](LICENSE). / ライセンスは MIT、著作権者は INDIGO GROUP LLC.
+
+The version on screen leads to everything about that release / 画面のバージョンから、そのリリースの中身をたどれる:
+
+- **Source** — git tag `vX.Y.Z` in [indigo-gr/claude-code-station](https://github.com/indigo-gr/claude-code-station/tags) / ソースは同じ番号の tag
+- **Changes** — the `[X.Y.Z]` section of [CHANGELOG.md](CHANGELOG.md) / 変更点は CHANGELOG の同じ番号の節
+- **Terms** — [LICENSE](LICENSE) at that tag / 配布条件はその tag の LICENSE

package/bin/ccs

@@ -18,8 +18,24 @@ SCRIPT_DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
 # Single source of truth: read version from package.json next to bin/.
 # Falls back to "0.0.0-dev" for copy-install layouts (install.sh drops bin/
 # scripts into ~/.claude/scripts/ without package.json) or if the read fails.
-VERSION=$(awk -F'"' '/"version":/{print $4; exit}' "${SCRIPT_DIR}/../package.json" 2>/dev/null)
-VERSION="${VERSION:-0.0.0-dev}"
+# Only this package's own file counts: install.sh copies into ~/.claude/scripts/,
+# where ../package.json can belong to something else entirely, and its version
+# must not reach the screen or the update check. A bash match, no extra process.
+CCS_PACKAGE='@indigo-gr/claude-code-station'
+CCS_INSTALL_CMD="npm install -g ${CCS_PACKAGE}"
+VERSION="0.0.0-dev"
+read_package_version() {
+  local file="${SCRIPT_DIR}/../package.json" json=""
+  local name_re='"name"[[:space:]]*:[[:space:]]*"([^"]*)"'
+  local version_re='"version"[[:space:]]*:[[:space:]]*"([0-9A-Za-z.+-]+)"'
+  [[ -f "$file" && -r "$file" ]] || return 0
+  json=$(<"$file") || return 0
+  [[ "$json" =~ $name_re ]] || return 0
+  [[ "${BASH_REMATCH[1]}" == "$CCS_PACKAGE" ]] || return 0
+  [[ "$json" =~ $version_re ]] || return 0
+  VERSION="${BASH_REMATCH[1]}"
+}
+read_package_version 2>/dev/null || true
 
 # Prefer a package-local tsx over the PATH one: the npm install brings tsx
 # as a dependency (../node_modules from the package's bin/), and the copy
@@ -38,6 +54,8 @@ CCS_SCAN="${SCRIPT_DIR}/ccs-scan.ts"
 CCS_PREVIEW="${SCRIPT_DIR}/ccs-preview.ts"
 CCS_DELETE="${SCRIPT_DIR}/ccs-delete.sh"
 CCS_INIT="${SCRIPT_DIR}/ccs-init.ts"
+CCS_UPDATE="${SCRIPT_DIR}/ccs-update-check.ts"
+COPYRIGHT='Copyright © INDIGO GROUP LLC.'
 
 # ── CCR_CMD -> CCS_CMD migration shim ────────────────────────────────────────
 if [[ -n "${CCR_CMD:-}" && -z "${CCS_CMD:-}" ]]; then
@@ -72,7 +90,6 @@ check_deps() {
   fi
   command -v node &>/dev/null  || missing+=("node")
   command -v claude &>/dev/null || missing+=("claude (Claude Code CLI)")
-  command -v tput &>/dev/null  || missing+=("tput")
 
   if [[ ${#missing[@]} -gt 0 ]]; then
     echo "❌ Missing dependencies:" >&2
@@ -123,6 +140,9 @@ Environment:
   CCR_CMD             Deprecated — still honored with a warning if CCS_CMD unset
   CCS_UI              simple | classic — overrides repos.yml defaults.ui
                       (the --ui= flag wins over both)
+  CCS_NO_UPDATE_CHECK Any non-empty value stops the update check and its notice
+                      (no network request, the cache is not read)
+  CCS_UPDATE_REGISTRY Registry to ask instead of https://registry.npmjs.org
 
 Examples:
   ccs                                     # Full launcher
@@ -132,7 +152,9 @@ Examples:
   ccs --dangerously-skip-permissions      # Pass-through flag to claude
 
 Config: ~/.config/ccs/repos.yml
-Cache:  ~/.cache/ccs/state.db
+Cache:  ~/.cache/ccs/state.db, ~/.cache/ccs/update-check
+
+${COPYRIGHT} MIT License.
 HELP
 }
 
@@ -277,8 +299,23 @@ if [[ "$UI" == "simple" ]] && ! fzf_at_least 0 61; then
   UI="classic"
 fi
 
+# better-sqlite3 ships prebuilt modules for the common platforms; anywhere else
+# one has to be built from source, which ccs does not do or test.
+native_module_missing() {
+  grep -Eq 'Cannot find module .*better-sqlite3' "$SCAN_ERR_FILE" 2>/dev/null
+}
+print_native_module_hint() {
+  native_module_missing || return 0
+  if [[ "$UI" == "simple" ]]; then
+    echo "[ccs] この環境（$(uname -s)-$(uname -m)）向けの部品（better-sqlite3）が入っていません。ソースから作る必要があります。" >&2
+  else
+    echo "[ccs] better-sqlite3 has no prebuilt module for this platform ($(uname -s)-$(uname -m)); it has to be built from source." >&2
+  fi
+}
+
 if [[ "$UI" == "classic" ]]; then
   cat "$SCAN_ERR_FILE" >&2
+  print_native_module_hint
   if (( SCAN_FAILED )); then
     if (( DO_REFRESH )); then
       echo "[ccs] refresh failed, continuing with stale DB" >&2
@@ -292,7 +329,9 @@ fi
 # the scan was quiet). Printed by print_scan_notes.
 print_scan_notes() {
   [[ "$UI" == "simple" ]] || return 0
-  if (( SCAN_FAILED )); then
+  if native_module_missing; then
+    print_native_module_hint
+  elif (( SCAN_FAILED )); then
     echo "[ccs] 設定ファイル（~/.config/ccs/repos.yml）を読めなかったので、前の一覧を出しました。下の行を直してから、もう一度 ccs と打ってください。" >&2
     sed 's/^/    /' "$SCAN_ERR_FILE" >&2
   elif [[ -s "$SCAN_ERR_FILE" ]]; then
@@ -392,13 +431,111 @@ REFRESH_BIND=(--bind "ctrl-r:execute('${TSX}' '${CCS_SCAN}' --force --quiet)+rel
 
 # ── Header (adaptive to terminal width) ──────────────────────────────────────
 # Note: ^D deletes SESSIONS only; repos are managed via ~/.config/ccs/repos.yml
-COLS=$(tput cols 2>/dev/null || echo 80)
+# Asks the terminal itself: `tput cols 2>/dev/null` inside $() sees no terminal
+# on stdout or stderr and answers 80 at any width. COLUMNS wins when exported.
+terminal_cols() {
+  local size=""
+  if [[ "${COLUMNS:-}" =~ ^[1-9][0-9]*$ ]]; then
+    echo "$COLUMNS"
+    return 0
+  fi
+  size=$(stty size 2>/dev/null </dev/tty) || size=""
+  size="${size##* }"
+  if [[ "$size" =~ ^[1-9][0-9]*$ ]]; then echo "$size"; else echo 80; fi
+}
+COLS=$(terminal_cols)
 if (( COLS >= 80 )); then
   HEADER=$'Enter: launch | ^Y: copy cmd | ^I: copy ID/path | ^R: refresh\n^D: del session (edit repos.yml to remove a repo) | Esc: cancel'
 else
   HEADER=$'⏎launch ^Y:cmd ^I:ID ^R:refresh\n^D:del[resume] Esc:quit'
 fi
 
+# ── Version and copyright (fzf border label) ─────────────────────────────────
+# The frame already exists in both looks, so the label costs no list row, and
+# change-header cannot replace it. fzf draws a label that is too long over the
+# frame's corners, so take the longest form that fits: the title goes first, then
+# the word Copyright, and the version stays. Computed once at start, like the
+# header above. Separators are plain spaces: `·` and `→` are East Asian Ambiguous.
+#   label_fits: 2 for the corner and first dash on the left, 2 on the right so
+#   the label never touches the closing corner.
+label_fits() { (( COLS >= $1 + 4 )); }
+VERSION_TAG="ccs v${VERSION}"
+COPYRIGHT_SHORT='© INDIGO GROUP LLC.'
+TITLE='Claude Code をはじめる'
+TAG_W=${#VERSION_TAG} COPYRIGHT_W=29 COPYRIGHT_SHORT_W=19 TITLE_W=22
+if [[ "$UI" == "simple" ]]; then
+  PAD='  '
+else
+  PAD=' '
+fi
+PAD_W=$(( ${#PAD} * 2 ))
+if [[ "$UI" == "simple" ]] && label_fits $(( PAD_W + TITLE_W + 2 + TAG_W + 2 + COPYRIGHT_W )); then
+  BORDER_LABEL="${PAD}${TITLE}  ${VERSION_TAG}  ${COPYRIGHT}${PAD}"
+elif label_fits $(( PAD_W + TAG_W + 2 + COPYRIGHT_W )); then
+  BORDER_LABEL="${PAD}${VERSION_TAG}  ${COPYRIGHT}${PAD}"
+elif label_fits $(( PAD_W + TAG_W + 2 + COPYRIGHT_SHORT_W )); then
+  BORDER_LABEL="${PAD}${VERSION_TAG}  ${COPYRIGHT_SHORT}${PAD}"
+else
+  BORDER_LABEL="${PAD}${VERSION_TAG}${PAD}"
+fi
+
+# ── Update notice ────────────────────────────────────────────────────────────
+# Startup only reads the cache (no process but `date`). When the cache is a day
+# old, ccs-update-check.ts refreshes it in the background for the NEXT launch:
+# never waited for, silent, with its own time limit. Only a plain X.Y.Z on both
+# sides compares, so a prerelease or a dev checkout gets no notice, and the
+# cache's text is safe to put in an fzf option. Set UPDATE_LATEST when the npm
+# latest is newer than this version.
+UPDATE_LATEST=""
+UPDATE_INTERVAL=86400
+version_is_newer() { # version_is_newer CANDIDATE CURRENT (both X.Y.Z)
+  local a b ai bi i
+  IFS=. read -r -a a <<< "$1"
+  IFS=. read -r -a b <<< "$2"
+  for i in 0 1 2; do
+    ai=$((10#${a[$i]})) bi=$((10#${b[$i]}))
+    (( ai > bi )) && return 0
+    (( ai < bi )) && return 1
+  done
+  return 1
+}
+check_for_update() {
+  [[ -z "${CCS_NO_UPDATE_CHECK:-}" ]] || return 0
+  local plain='^[0-9]{1,9}\.[0-9]{1,9}\.[0-9]{1,9}$'
+  [[ "$VERSION" =~ $plain ]] || return 0
+
+  local cache="${XDG_CACHE_HOME:-$HOME/.cache}/ccs/update-check"
+  local key value latest="" checked=0
+  if [[ -f "$cache" && -r "$cache" ]]; then
+    while IFS='=' read -r key value || [[ -n "$key" ]]; do
+      case "$key" in
+        latest)  latest="$value" ;;
+        checked) checked="$value" ;;
+      esac
+    done < "$cache"
+  fi
+  if [[ "$latest" =~ $plain ]] && version_is_newer "$latest" "$VERSION"; then
+    UPDATE_LATEST="$latest"
+  fi
+
+  # stdout not a terminal = a script or a test, not someone at the picker.
+  [[ -t 1 ]] || return 0
+  [[ "$checked" =~ ^[0-9]{1,12}$ ]] || checked=0
+  local age=$(( $(date +%s) - 10#$checked ))
+  if (( age >= UPDATE_INTERVAL || age < 0 )); then
+    ( "${TSX}" "${CCS_UPDATE}" "${CCS_PACKAGE}" </dev/null >/dev/null 2>&1 & )
+  fi
+  return 0
+}
+check_for_update || true
+
+# simple: the frame says a new version is out; how to get it is printed once the
+# picker has closed, where it can be read and copied.
+print_update_note() {
+  [[ -n "$UPDATE_LATEST" ]] || return 0
+  echo "[ccs] 新しい ccs v${UPDATE_LATEST} が出ています（いまは v${VERSION}）。上げるには: ${CCS_INSTALL_CMD}" >&2
+}
+
 # ── Launch fzf (simple) ──────────────────────────────────────────────────────
 # Same rows, same bindings and the same post-pick path as the classic look;
 # only the frame, the words and where the badges live differ (the list shows
@@ -415,11 +552,18 @@ fi
 #                  every edit goes back to the top match instead
 #   result:…down   the cursor never rests on a heading row after the list
 #                  (re)loads or a filter finishes
+#   zero/result    with no match fzf fires zero, result, focus, in that order,
+#                  and focus would put the guide line back over the no-match
+#                  message. So zero unbinds focus and result rebinds it once
+#                  there are rows; the result binding already runs bash, so a
+#                  cursor move still costs no process
 if [[ "$UI" == "simple" ]]; then
   SIMPLE_HEADER='  Enter: ひらく   ↑↓ かマウス: えらぶ   Esc: やめる'
   LIST_LABEL='  えらぶ  '
   if (( SCAN_FAILED )); then
     LIST_LABEL='  えらぶ  ⚠️ 設定ファイルを読めませんでした（Esc でやめると理由が出ます）  '
+  elif [[ -n "$UPDATE_LATEST" ]] && (( COLS >= 44 )); then
+    LIST_LABEL="  えらぶ  ccs v${UPDATE_LATEST} が出ています  "
   fi
   LIST_FAILED=0
   ROWS=$("${TSX}" "${CCS_LIST}" "${LIST_FLAGS[@]}" 2>/dev/null) || LIST_FAILED=1
@@ -450,7 +594,7 @@ if [[ "$UI" == "simple" ]]; then
     --with-nth=1 \
     --no-sort --no-hscroll \
     --style=full:rounded --border=rounded \
-    --border-label='  Claude Code をはじめる  ' --border-label-pos=3 \
+    --border-label="${BORDER_LABEL}" --border-label-pos=3 \
     --list-label="${LIST_LABEL}" --input-label='  さがす  ' --preview-label='  中身  ' \
     --header="${SIMPLE_HEADER}" --header-border=none \
     --ghost='ここに文字を打つと、しぼりこめます' \
@@ -464,11 +608,12 @@ if [[ "$UI" == "simple" ]]; then
     "${REFRESH_BIND[@]}" \
     "${GROUP_BINDS[@]}" \
     --bind "focus:change-header(${SIMPLE_HEADER})" \
-    --bind "zero:change-header(${MSG_NO_MATCH})" \
+    --bind "zero:unbind(focus)+change-header(${MSG_NO_MATCH})" \
     --bind "change:first" \
-    --bind "result:transform:bash -c 'case \$1 in separator:*) echo down ;; esac' _ {4}" \
+    --bind "result:transform:bash -c 'case \$1 in separator:*) echo \"rebind(focus)+down\" ;; ?*) echo \"rebind(focus)\" ;; esac' _ {4}" \
   ) || FZF_RC=$?
   print_scan_notes
+  print_update_note
   if (( FZF_RC != 0 )) || [[ -z "$SELECTED" ]]; then
     if (( FZF_RC == 2 )); then
       echo "[ccs] 一覧をうまく開けませんでした。今の見た目で開くには: ccs --ui=classic" >&2
@@ -481,6 +626,12 @@ fi
 
 # ── Launch fzf ───────────────────────────────────────────────────────────────
 if [[ "$UI" == "classic" ]]; then
+# The picker opens below this line (--height), and the header beside the preview
+# is too narrow for the command, so the notice goes above the frame. It costs no
+# list row and stays in the scrollback after the picker closes.
+if [[ -n "$UPDATE_LATEST" ]]; then
+  echo "[ccs] Update v${VERSION} -> v${UPDATE_LATEST}: ${CCS_INSTALL_CMD}" >&2
+fi
 SELECTED=$("${TSX}" "${CCS_LIST}" "${LIST_FLAGS[@]+"${LIST_FLAGS[@]}"}" | fzf \
   --ansi \
   --delimiter=$'\t' \
@@ -495,6 +646,7 @@ SELECTED=$("${TSX}" "${CCS_LIST}" "${LIST_FLAGS[@]+"${LIST_FLAGS[@]}"}" | fzf \
   --height='80%' \
   --layout=reverse \
   --border \
+  --border-label="${BORDER_LABEL}" --border-label-pos=3 \
   --prompt='ccs> ' \
   --tabstop=4 \
 ) || exit 0
@@ -533,6 +685,13 @@ if [[ -z "$ROW_CMD" ]]; then
   exit 1
 fi
 
+# Defense-in-depth copy of the policy ccs-config.ts enforces on command at load
+# time. Extra columns would also land here, joined by \x1f, and be refused.
+if [[ "$ROW_CMD" =~ [\;\&\|\<\>\$\`\"\'\\] || "$ROW_CMD" =~ [[:cntrl:]] ]]; then
+  echo "❌ Refusing the selected row's command (shell metacharacters/control chars)" >&2
+  exit 1
+fi
+
 # ── Per-row command is authoritative ─────────────────────────────────────────
 # CCS_CMD env is resolved by ccs-config.ts as a fallback for repos without
 # explicit `command:` (priority: repos[].command > defaults.command > CCS_CMD > "claude").
@@ -569,8 +728,8 @@ esac
 
 # Path validation (traversal prevention). Must be $HOME itself or a child
 # path ("$HOME"/*): a bare prefix match would also accept sibling dirs like
-# /Users/xEVIL (audit L-1).
-if [[ "$ROW_CWD" != "$HOME" && "$ROW_CWD" != "$HOME"/* ]]; then
+# /Users/xEVIL (audit L-1). A `..` segment could walk back out of $HOME.
+if [[ ( "$ROW_CWD" != "$HOME" && "$ROW_CWD" != "$HOME"/* ) || "/${ROW_CWD}/" == */../* ]]; then
   if [[ "$UI" == "simple" ]]; then
     echo "⚠️  ホームの外のフォルダ（${ROW_CWD}）は開けないので、いまいるフォルダで開きます" >&2
   else
@@ -614,7 +773,9 @@ case "$KIND" in
     else
       echo "🔄 Resuming session ${KEY} in $(pwd)..."
     fi
+    set -f # split ROW_CMD into words, but expand no wildcard in it
     ${ROW_CMD} --resume "${KEY}" "${PASS_ARGS[@]+"${PASS_ARGS[@]}"}"
+    set +f
     ;;
   new)
     if [[ "$UI" == "simple" ]]; then
@@ -622,6 +783,8 @@ case "$KIND" in
     else
       echo "🚀 Launching ${KEY} in $(pwd)..."
     fi
+    set -f # split ROW_CMD into words, but expand no wildcard in it
     ${ROW_CMD} "${PASS_ARGS[@]+"${PASS_ARGS[@]}"}"
+    set +f
     ;;
 esac

package/bin/ccs-list.ts

@@ -30,6 +30,7 @@ import { openDb, getMeta, reposV3Columns } from "./ccs-db.ts";
 import { getPaths } from "./ccs-config.ts";
 import { SHELL_METACHARS } from "./ccs-sanitize.ts";
 import {
+  displayIcon,
   truncate,
   formatRelativeTime,
   formatDateTime,
@@ -268,7 +269,7 @@ function repoToRow({ repo: r, parent, prefix }: GroupedRepo): string {
     parentName && parentName !== displayName
       ? `  \x1b[2m‹${parentName}›\x1b[0m`
       : "";
-  const label = `${prefix}${r.icon || "📁"} ${displayName}${parentHint}${LABEL_SEP}`;
+  const label = `${prefix}${displayIcon(r.icon)} ${displayName}${parentHint}${LABEL_SEP}`;
   const desc = truncate(r.description || "", DESC_MAX);
   if (r.launch === 0) {
     // Group header (`launch: false`): display-only, so no badges (the header
@@ -301,6 +302,10 @@ interface SessionRowFull {
   repo_command: string | null;
 }
 
+function isWellFormedRow(row: string): boolean {
+  return row.split("\t").length === 6 && !/[\n\r\x1f]/.test(row);
+}
+
 function sessionToRow(s: SessionRowFull, defaultCommand: string): string {
   // Mapped sessions use the registered repo icon + name — the unique `name`,
   // deliberately not the repos.yml `label`, so session rows read the same as
@@ -318,7 +323,7 @@ function sessionToRow(s: SessionRowFull, defaultCommand: string): string {
     : s.cwd
       ? truncate(s.cwd.replace(homedir(), "~"), DESC_MAX)
       : "(unknown)";
-  const mapIcon = s.repo_display ? s.repo_icon || "📁" : "❓";
+  const mapIcon = s.repo_display ? displayIcon(s.repo_icon) : "❓";
   const label = `🔄 ${mapIcon} ${displayName}${LABEL_SEP}`;
   const desc = truncate(s.topic || "", DESC_MAX);
   const badges = `[${formatDateTime(s.last_activity_at)}]`;
@@ -660,7 +665,13 @@ function main(): number {
       lines.push(...sessionRows);
     }
 
-    process.stdout.write(lines.join("\n") + (lines.length > 0 ? "\n" : ""));
+    // Last check: bin/ccs takes the columns by position and runs column 6, so a
+    // row of any other shape is dropped, never handed over.
+    const rows = lines.filter(isWellFormedRow);
+    if (rows.length !== lines.length) {
+      process.stderr.write(`[ccs-list] skipped ${lines.length - rows.length} malformed row(s)\n`);
+    }
+    process.stdout.write(rows.join("\n") + (rows.length > 0 ? "\n" : ""));
     return 0;
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/bin/ccs-preview-session.ts

@@ -8,6 +8,7 @@ import { readdir, readFile, stat } from "node:fs/promises";
 import { join } from "node:path";
 import { homedir } from "node:os";
 import { maskSecrets } from "./ccs-secrets.ts";
+import { stripControlChars } from "./ccs-sanitize.ts";
 import {
   extractText,
   truncate,
@@ -19,6 +20,11 @@ const PROJECTS_DIR = join(homedir(), ".claude", "projects");
 const MAX_PREVIEW_MESSAGES = 20;
 const MAX_MSG_LEN = 200;
 
+/** Hide secrets before cutting: a key across the cut no longer matches its pattern. */
+function safeText(text: string, max: number): string {
+  return truncate(maskSecrets(stripControlChars(text)), max);
+}
+
 // extractText / truncate / UUID_RE / MAX_JSONL_SIZE come from ccs-utils.ts —
 // shared with the scanner so the preview and topic extraction can no longer
 // drift apart (review A-1/A-2). The preview passes includeToolBlocks below
@@ -128,7 +134,7 @@ export async function renderSessionPreview(
               : entry.type === "user"
                 ? "👤"
                 : "🤖",
-            text: maskSecrets(truncate(text, MAX_MSG_LEN)),
+            text: safeText(text, MAX_MSG_LEN),
           });
           // Memory optimization: keep at most 2x display limit
           if (messages.length > MAX_PREVIEW_MESSAGES * 2) {
@@ -160,9 +166,9 @@ export async function renderSessionPreview(
   // treatment as message text: maskSecrets for credential leakage (audit
   // M-2), truncate to strip control chars / escape sequences (audit NEW-1).
   console.log("━━━ Session Info ━━━");
-  console.log(`📁 ${maskSecrets(truncate(cwd, 200))}`);
-  if (gitBranch) console.log(`🌿 ${maskSecrets(truncate(gitBranch, 100))}`);
-  if (version) console.log(`📌 Claude ${maskSecrets(truncate(version, 50))}`);
+  console.log(`📁 ${safeText(cwd, 200)}`);
+  if (gitBranch) console.log(`🌿 ${safeText(gitBranch, 100)}`);
+  if (version) console.log(`📌 Claude ${safeText(version, 50)}`);
   console.log(`💬 ${messages.length} messages`);
   console.log("━━━ Conversation ━━━");
   console.log();

package/bin/ccs-preview.ts

@@ -20,6 +20,7 @@ import { getPaths } from "./ccs-config.ts";
 import { openDb, reposV3Columns, type DbHandle } from "./ccs-db.ts";
 import { renderSessionPreview } from "./ccs-preview-session.ts";
 import {
+  displayIcon,
   formatRelativeTime,
   formatDateTime,
   formatFriendlyTime,
@@ -29,6 +30,7 @@ import {
   tildePath,
   uiFromArgv,
 } from "./ccs-utils.ts";
+import { stripControlChars, stripControlCharsKeepLines } from "./ccs-sanitize.ts";
 
 // ---------------------------------------------------------------------------
 // ANSI helpers
@@ -225,9 +227,9 @@ function renderRepoPreview(name: string, cwd: string): void {
     // showing the name.
     const displayName = repoDisplayName(repo);
     const nameHint = displayName !== repo.name ? `  ${dim(`(${repo.name})`)}` : "";
-    console.log(`${hdr(`${repo.icon || "📁"} ${displayName}`)}${nameHint}`);
+    console.log(`${hdr(`${displayIcon(repo.icon)} ${displayName}`)}${nameHint}`);
     console.log(dim(repo.path));
-    if (repo.description) console.log(repo.description);
+    if (repo.description) console.log(stripControlCharsKeepLines(repo.description));
     console.log("");
 
     // --- Git ---
@@ -337,7 +339,7 @@ function renderRepoPreview(name: string, cwd: string): void {
       const tags = JSON.parse(repo.tags_json || "[]") as unknown;
       if (Array.isArray(tags) && tags.length > 0) {
         console.log(divider("Tags"));
-        console.log(tags.map(String).join(", "));
+        console.log(tags.map((t) => stripControlChars(String(t))).join(", "));
       }
     } catch {
       // ignore
@@ -395,7 +397,7 @@ function renderGroupPreview(name: string, cwd: string): void {
       return;
     }
 
-    console.log(`${hdr(`${group.icon || "📁"} ${repoDisplayName(group)}`)}`);
+    console.log(`${hdr(`${displayIcon(group.icon)} ${repoDisplayName(group)}`)}`);
     console.log(dim(group.path));
     if (group.description) console.log(truncate(group.description, 200));
     console.log("");
@@ -418,7 +420,7 @@ function renderGroupPreview(name: string, cwd: string): void {
     entries.forEach((r, i) => {
       const rel = truncate(relative(group.path, r.path), 60) + "/";
       const tag = r.launch === 0 ? `  ${dim("(group)")}` : "";
-      console.log(`  ${r.icon || "📁"} ${names[i].padEnd(width)}  ${dim(rel)}${tag}`);
+      console.log(`  ${displayIcon(r.icon)} ${names[i].padEnd(width)}  ${dim(rel)}${tag}`);
     });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);

package/bin/ccs-sanitize.ts

@@ -26,10 +26,16 @@ export function hasShellMetachars(value: string): boolean {
   return SHELL_METACHARS.test(value);
 }
 
-// All C0 control characters plus DEL. \n and \t are NOT exempted: every ccs
-// display surface is single-line-per-field (TSV rows, preview lines), and the
-// TSV protocol between ccs-list and fzf breaks on embedded tabs/newlines.
-const CONTROL_CHARS_RE = /[\x00-\x1f\x7f]+/g;
+// All C0 control characters, DEL and C1 (U+0080-U+009F: a terminal may read
+// U+009B as ESC [), plus the marks that reorder displayed text (U+061C,
+// U+200E-F, U+202A-E, U+2066-9). Emoji joiners and variation selectors stay.
+// \n and \t are NOT exempted: every ccs display surface is
+// single-line-per-field (TSV rows, preview lines), and the TSV protocol between
+// ccs-list and fzf breaks on embedded tabs/newlines.
+const CONTROL_CHARS_RE =
+  /[\x00-\x1f\x7f-\x9f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]+/g;
+const CONTROL_CHARS_EXCEPT_NEWLINE_RE =
+  /[\x00-\x09\x0b-\x1f\x7f-\x9f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]+/g;
 
 /**
  * Strip C0 control characters (incl. ESC) and DEL from display text,
@@ -41,6 +47,11 @@ export function stripControlChars(text: string): string {
   return text.replace(CONTROL_CHARS_RE, " ").replace(/\s+/g, " ").trim();
 }
 
+/** The same cleaning for text shown as several lines: only newlines survive. */
+export function stripControlCharsKeepLines(text: string): string {
+  return text.replace(CONTROL_CHARS_EXCEPT_NEWLINE_RE, " ");
+}
+
 /**
  * Sanitize a session-provided cwd at intake (audit H-1).
  *
@@ -53,5 +64,8 @@ export function sanitizeSessionCwd(cwd: string): string | null {
   if (cwd.length === 0) return null;
   if (hasShellMetachars(cwd)) return null;
   if (!cwd.startsWith("/")) return null;
+  // A `..` segment walks out of the checks made on the prefix (the $HOME gate
+  // in bin/ccs), and this value also reaches the clipboard through Ctrl-Y.
+  if (cwd.split("/").includes("..")) return null;
   return cwd;
 }

package/bin/ccs-scan.ts

@@ -15,7 +15,7 @@
 
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { open, readdir, stat } from "node:fs/promises";
+import { open, readdir, realpath, stat } from "node:fs/promises";
 import {
   closeSync,
   existsSync,
@@ -81,12 +81,25 @@ const PREVIEW_FILE_LIMIT = 10;
 // Utilities
 // ---------------------------------------------------------------------------
 
+const SAFE_GIT_ARGS = [
+  "--no-optional-locks",
+  "-c",
+  "diff.autoRefreshIndex=false",
+  "-c",
+  "core.fsmonitor=false",
+  "-c",
+  "core.hooksPath=/dev/null",
+];
+
 async function runGit(
   cwd: string,
   args: string[],
 ): Promise<{ stdout: string; stderr: string } | null> {
   try {
-    const res = await execFileP("git", args, {
+    // A repo's own .git/config can name programs. These are the ones a scan
+    // would run: an fsmonitor, and the post-index-change hook when status or
+    // diff rewrites the index. A scan only reads, so neither rewrites it.
+    const res = await execFileP("git", [...SAFE_GIT_ARGS, ...args], {
       cwd,
       timeout: GIT_TIMEOUT_MS,
       maxBuffer: 4 * 1024 * 1024,
@@ -216,12 +229,24 @@ async function readFirstLine(filePath: string): Promise<string | null> {
   }
 }
 
+/** A symlink is followed only when it ends up inside the repo. */
+async function realPathInside(path: string, realRoot: string): Promise<string | null> {
+  const real = await realpath(path);
+  return real === realRoot || real.startsWith(`${realRoot}/`) ? real : null;
+}
+
 async function listDirPreview(
   dirPath: string,
+  repoPath: string,
 ): Promise<{ count: number; previews: PreviewFile[] }> {
   if (!existsSync(dirPath)) return { count: 0, previews: [] };
   let entries: string[];
+  let realRoot: string;
   try {
+    realRoot = await realpath(repoPath);
+    if ((await realPathInside(dirPath, realRoot)) === null) {
+      return { count: 0, previews: [] };
+    }
     entries = await readdir(dirPath);
   } catch {
     return { count: 0, previews: [] };
@@ -230,8 +255,9 @@ async function listDirPreview(
 
   const results = await Promise.all(
     visible.map(async (name): Promise<PreviewFile | null> => {
-      const full = join(dirPath, name);
       try {
+        const full = await realPathInside(join(dirPath, name), realRoot);
+        if (full === null) return null;
         const st = await stat(full);
         if (!st.isFile()) return null;
         const line = await readFirstLine(full);
@@ -391,11 +417,11 @@ async function scanOneRepo(
     }
 
     // --- Workspace dirs ---
-    const handoff = await listDirPreview(join(repo.path, "handoff"));
+    const handoff = await listDirPreview(join(repo.path, "handoff"), repo.path);
     stats.handoff_count = handoff.count;
     handoffPreviews = handoff.previews;
 
-    const pending = await listDirPreview(join(repo.path, "pendings"));
+    const pending = await listDirPreview(join(repo.path, "pendings"), repo.path);
     stats.pending_count = pending.count;
     pendingPreviews = pending.previews;
 
@@ -647,7 +673,15 @@ export async function scan(opts: ScanOptions = {}): Promise<ScanResult> {
     };
   }
 
-  const handle = openDb(paths.stateDb);
+  // A DB that cannot open must not leave the lock behind: every later scan
+  // would say "another scan is in progress" and hide the real error.
+  let handle: ReturnType<typeof openDb>;
+  try {
+    handle = openDb(paths.stateDb);
+  } catch (err) {
+    releaseLock();
+    throw err;
+  }
 
   try {
     syncReposToDb(handle.db, config.repos);

package/bin/ccs-update-check.ts

@@ -0,0 +1,131 @@
+#!/usr/bin/env tsx
+/**
+ * ccs-update-check.ts — ask the npm registry for the package's latest version
+ * and remember the answer for bin/ccs.
+ *
+ * bin/ccs starts this in the background (at most once a day) and never waits
+ * for it: the launcher only reads the cache this file writes, so a slow or
+ * missing network cannot delay or stop the picker. Nothing is printed and the
+ * exit code is always 0.
+ *
+ * Sent: one HTTPS GET for the package's public dist-tags. No ccs version, repo,
+ * session or machine details are in it.
+ *
+ * Cache: <cacheDir>/update-check, two key=value lines:
+ *   latest=<X.Y.Z, or empty when the registry's latest is not a plain release>
+ *   checked=<unix seconds>
+ * The registry's answer is untrusted text that ends up in a terminal and in an
+ * fzf option, so only a plain X.Y.Z is ever stored. bin/ccs validates the file
+ * again when it reads it.
+ */
+
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { getPaths } from "./ccs-config.ts";
+
+const DEFAULT_REGISTRY = "https://registry.npmjs.org";
+const REQUEST_TIMEOUT_MS = 3_000;
+const HARD_EXIT_MS = 5_000;
+// bin/ccs asks again once `checked` is a day old (UPDATE_INTERVAL there). A
+// failed attempt is back-dated so the next try comes after an hour, not a day.
+const CHECK_INTERVAL_S = 86_400;
+const RETRY_AFTER_FAILURE_S = 3_600;
+
+const PLAIN_RELEASE = /^[0-9]{1,9}\.[0-9]{1,9}\.[0-9]{1,9}$/;
+
+export function isPlainRelease(version: unknown): version is string {
+  return typeof version === "string" && PLAIN_RELEASE.test(version);
+}
+
+/** Registry base URL: CCS_UPDATE_REGISTRY when it is http(s), else npm's. */
+export function registryBase(value: string | undefined): string {
+  if (value && /^https?:\/\/[^\s]+$/.test(value)) return value.replace(/\/+$/, "");
+  return DEFAULT_REGISTRY;
+}
+
+export function distTagsUrl(base: string, pkg: string): string {
+  return `${base}/-/package/${encodeURIComponent(pkg)}/dist-tags`;
+}
+
+/**
+ * The version the cache should hold after a successful answer: a plain release,
+ * or "" when `latest` is a prerelease. Throws on an answer with no usable
+ * `latest` (treated like a failed request).
+ */
+export function latestFromDistTags(body: unknown): string {
+  if (typeof body !== "object" || body === null) throw new Error("not an object");
+  const latest = (body as { latest?: unknown }).latest;
+  if (typeof latest !== "string") throw new Error("no latest tag");
+  return isPlainRelease(latest) ? latest : "";
+}
+
+export function renderCache(latest: string, checked: number): string {
+  return `latest=${latest}\nchecked=${checked}\n`;
+}
+
+/** The last good version in an existing cache file ("" when there is none). */
+export function cachedLatest(text: string): string {
+  for (const line of text.split("\n")) {
+    if (line.startsWith("latest=")) {
+      const v = line.slice("latest=".length);
+      return isPlainRelease(v) ? v : "";
+    }
+  }
+  return "";
+}
+
+function writeCache(cacheDir: string, latest: string, checked: number): void {
+  mkdirSync(cacheDir, { recursive: true, mode: 0o700 });
+  const file = join(cacheDir, "update-check");
+  const tmp = `${file}.${process.pid}.tmp`;
+  writeFileSync(tmp, renderCache(latest, checked), { mode: 0o600 });
+  renameSync(tmp, file);
+}
+
+function readCachedLatest(cacheDir: string): string {
+  try {
+    return cachedLatest(readFileSync(join(cacheDir, "update-check"), "utf-8"));
+  } catch {
+    return "";
+  }
+}
+
+async function fetchLatest(url: string): Promise<string> {
+  const res = await fetch(url, {
+    headers: { accept: "application/json" },
+    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+  });
+  if (!res.ok) throw new Error(`HTTP ${res.status}`);
+  return latestFromDistTags(await res.json());
+}
+
+async function main(): Promise<void> {
+  const pkg = process.argv[2];
+  if (!pkg) return;
+  // A stalled DNS lookup or body must not leave a process behind.
+  setTimeout(() => process.exit(0), HARD_EXIT_MS);
+
+  const { cacheDir } = getPaths();
+  const now = Math.floor(Date.now() / 1000);
+  try {
+    const url = distTagsUrl(registryBase(process.env.CCS_UPDATE_REGISTRY), pkg);
+    writeCache(cacheDir, await fetchLatest(url), now);
+  } catch {
+    // Offline, timed out, bad answer: keep what the last good answer said.
+    try {
+      const retryAt = now - CHECK_INTERVAL_S + RETRY_AFTER_FAILURE_S;
+      writeCache(cacheDir, readCachedLatest(cacheDir), retryAt);
+    } catch {
+      // Cache not writable: nothing to remember, nothing to report.
+    }
+  }
+}
+
+// Run only as a script, so the test suite can import the helpers.
+if (process.argv[1]?.endsWith("ccs-update-check.ts")) {
+  main().then(
+    () => process.exit(0),
+    () => process.exit(0),
+  );
+}

package/bin/ccs-utils.ts

@@ -46,6 +46,11 @@ export function truncate(s: string, max: number): string {
   return flat.length <= max ? flat : flat.slice(0, max - 1) + "…";
 }
 
+/** A repos.yml icon as drawn: never a tab or an escape, 📁 when nothing is left. */
+export function displayIcon(icon: string | null | undefined): string {
+  return stripControlChars(icon ?? "") || "📁";
+}
+
 // ---------------------------------------------------------------------------
 // Repo display name & nesting
 // ---------------------------------------------------------------------------

package/docs/v0.2.0-review-notes.md

@@ -1,6 +1,6 @@
 # v0.2.0 Static Review Notes
 
-Severity per `~/.claude/rules/common/code-review.md`:
+Severity:
 CRITICAL (block) · HIGH (warn) · MEDIUM (info) · LOW (note)
 
 ---

package/docs/v0.2.1-backlog.md

@@ -2,7 +2,7 @@
 
 Collected from the second-round code review (CR2, 2026-04-14) across four specialist reviews (TypeScript / Security / Database / General). **None of these are ship blockers for v0.2.0** — all HIGH-severity findings and the critical MEDIUM items were addressed in Phase 6 (see `docs/v0.2.0-review-notes.md` §Phase 6 fixes). The items below are deliberate deferrals, scheduled for v0.2.1 or later as scope permits.
 
-Severity conventions per `~/.claude/rules/common/code-review.md`:
+Severity conventions:
 CRITICAL (block) · HIGH (warn) · MEDIUM (info) · LOW (note) · INFO (optional)
 
 ---
@@ -202,7 +202,7 @@ Follow-up batch (same branch, second pass on user request):
 **File**: — (release process, not code)
 **Issue**: The account-free distribution path is DONE — `npm install -g github:indigo-gr/claude-code-station` works (bin/ccs resolves $0 through npm's global-bin symlink, tsx ships as a dependency and is preferred from the package-local node_modules, `files` field set; verified end-to-end via `npm pack` + sandbox-prefix global install). What remains is only publishing to the npm REGISTRY for discoverability/version pinning.
 **Fix sketch**: npm account → claim package name → `npm publish` (repo side is ready); optional release automation.
-**Why deferred**: Pure publish decision. Tracked in `~/.claude/pendings/ccs-npm-registry-publish.md` (owner decision).
+**Why deferred**: Pure publish decision (owner decision).
 
 ### [HIGH] `install.sh --auto-install` — auto-install missing dependencies
 **File**: `install.sh`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@indigo-gr/claude-code-station",
-  "version": "0.3.3",
+  "version": "0.4.1",
   "description": "Claude Code Station — fzf-powered launcher and session picker for Claude Code with multi-repo support and SQLite-backed state cache",
   "type": "module",
   "bin": {
@@ -18,6 +18,7 @@
     "session",
     "launcher"
   ],
+  "author": "INDIGO GROUP LLC.",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -32,10 +33,10 @@
     "CHANGELOG.md"
   ],
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
   "dependencies": {
-    "better-sqlite3": "^11.3.0",
+    "better-sqlite3": "^13.0.3",
     "tsx": "^4.19.0",
     "yaml": "^2.6.0"
   },