commandmate 0.17.0 → 0.19.0

package/dist/server/src/lib/db/verification-db.js

@@ -10,6 +10,11 @@
  * leaves a `running` row behind, which is recoverable evidence, whereas a
  * single write-on-completion would leave nothing at all.
  *
+ * The timestamps describe the *execution*, not the writes (Issue #1625): a
+ * caller that measured a gate closes the row with the window it measured, so
+ * `finished_at - started_at` equals `duration_ms` instead of the gap between
+ * two adjacent INSERT/UPDATE statements.
+ *
  * The finish* functions throw when the target row does not exist. A silent
  * no-op would let a caller believe it recorded a verdict it never recorded —
  * exactly the failure this table exists to make impossible.
@@ -64,6 +69,9 @@ function mapGateRow(row) {
         logTail: row.log_tail,
         startedAt: new Date(row.started_at),
         finishedAt: row.finished_at === null ? null : new Date(row.finished_at),
+        timingsMeasured: row.finished_at !== null &&
+            row.duration_ms !== null &&
+            row.finished_at - row.started_at === row.duration_ms,
     };
 }
 /** Open a run in `running` state. */
@@ -113,15 +121,25 @@ function createGateResult(db, runId, input) {
     }
     return mapGateRow(row);
 }
-/** Close a gate result with its outcome, stamping `finished_at`. */
+/**
+ * Close a gate result with its outcome and the interval it occupied.
+ *
+ * `started_at` is rewritten only when the caller declares an
+ * {@link FinishGateResultPatch.executionWindow}: the value written when the row
+ * was opened is a placeholder for "this gate was entered", and the measured
+ * start is a few milliseconds later — after the insert this call is closing.
+ * Leaving the placeholder would put that gap inside the reported window.
+ */
 function finishGateResult(db, gateResultId, patch) {
     const info = db
         .prepare(`
       UPDATE verification_gate_results
-      SET status = ?, exit_code = ?, duration_ms = ?, log_tail = ?, finished_at = ?
+      SET status = ?, exit_code = ?, duration_ms = ?, log_tail = ?,
+          started_at = COALESCE(?, started_at),
+          finished_at = ?
       WHERE id = ?
     `)
-        .run(patch.status, patch.exitCode ?? null, patch.durationMs ?? null, patch.logTail ?? null, Date.now(), gateResultId);
+        .run(patch.status, patch.exitCode ?? null, patch.durationMs ?? null, patch.logTail ?? null, patch.executionWindow?.startedAt ?? null, patch.executionWindow?.finishedAt ?? Date.now(), gateResultId);
     if (info.changes === 0) {
         throw new Error(`Verification gate result ${gateResultId} not found`);
     }

package/dist/server/src/lib/db/worktree-db.js

@@ -28,6 +28,7 @@ exports.deleteRepositoryWorktrees = deleteRepositoryWorktrees;
 exports.deleteWorktreesByIds = deleteWorktreesByIds;
 const selected_agents_validator_1 = require("../../lib/selected-agents-validator");
 const chat_db_1 = require("./chat-db");
+const worktree_child_tables_1 = require("./migrations/worktree-child-tables");
 /**
  * Get latest user message per CLI tool for multiple worktrees (batch query)
  * Optimized to avoid N+1 query problem
@@ -269,30 +270,24 @@ function upsertWorktree(db, worktree) {
     run();
 }
 /**
- * Discover every table that has a foreign key referencing `worktrees(id)`,
- * along with the referencing column. Derived dynamically from the live schema
- * so it never drifts out of sync with future migrations that add child tables.
+ * Delete every child row pointing at any of `worktreeIds`.
  *
- * Issue #1151.
+ * Deliberately covers *all* deletable child tables, not just the FK-less ones:
+ * doing so makes deletion correct even when `PRAGMA foreign_keys` is off, and
+ * the extra statements against CASCADE tables remove rows that would have been
+ * removed anyway. Append-only ledgers are skipped (see getWriteGuardedTables).
+ * Must run before the parent row is deleted (Issue #1621).
  */
-function getWorktreeChildTables(db) {
-    const tables = db
-        .prepare("SELECT name FROM sqlite_master WHERE type = 'table'")
-        .all();
-    const children = [];
-    for (const { name } of tables) {
-        if (name === 'worktrees')
+function deleteWorktreeChildRows(db, worktreeIds, children = (0, worktree_child_tables_1.getWorktreeChildTables)(db)) {
+    if (worktreeIds.length === 0)
+        return;
+    const { noDelete } = (0, worktree_child_tables_1.getWriteGuardedTables)(db);
+    const placeholders = worktreeIds.map(() => '?').join(',');
+    for (const { table, column } of children) {
+        if (noDelete.has(table))
             continue;
-        // PRAGMA identifiers cannot be bound; `name` comes from sqlite_master, not
-        // user input, so string interpolation here is safe.
-        const fks = db.prepare(`PRAGMA foreign_key_list("${name}")`).all();
-        for (const fk of fks) {
-            if (fk.table === 'worktrees' && (fk.to === 'id' || fk.to === null)) {
-                children.push({ table: name, column: fk.from });
-            }
-        }
+        db.prepare(`DELETE FROM "${table}" WHERE "${column}" IN (${placeholders})`).run(...worktreeIds);
     }
-    return children;
 }
 /**
  * Rename a worktree row's primary key from `oldId` to `newId`, re-pointing every
@@ -300,6 +295,18 @@ function getWorktreeChildTables(db) {
  * same-directory branch switch preserve chat history and all related data
  * instead of destroying it (Issue #1151).
  *
+ * "Every child table" means every table carrying a worktree reference, not just
+ * the ones that declare a foreign key: `tasks`, `verification_runs` and
+ * `skill_operations` do not, and used to be left addressing an ID that no
+ * longer resolves (Issue #1621).
+ *
+ * Append-only ledgers are the one exception, and the schema states it itself —
+ * `skill_operations` aborts any UPDATE (#1234). An immutable audit row records
+ * what happened under the identity in force at the time, and rewriting it is
+ * precisely what its trigger exists to prevent; attempting it does not fail
+ * quietly either, it aborts the enclosing transaction and takes the rename with
+ * it (measured). See getWriteGuardedTables.
+ *
  * Must be called inside a transaction. `PRAGMA defer_foreign_keys` defers FK
  * enforcement to COMMIT, letting us repoint the parent PK and its children in
  * any order without needing `ON UPDATE CASCADE` on every constraint.
@@ -314,15 +321,20 @@ function migrateWorktreeIdPreservingChildren(db, oldId, newId) {
     // independently. Resets automatically at the end of the transaction.
     db.pragma('defer_foreign_keys = ON');
     const newExists = db.prepare('SELECT 1 FROM worktrees WHERE id = ?').get(newId);
-    const children = getWorktreeChildTables(db);
+    const { noUpdate } = (0, worktree_child_tables_1.getWriteGuardedTables)(db);
+    const allChildren = (0, worktree_child_tables_1.getWorktreeChildTables)(db);
+    const children = allChildren.filter(({ table }) => !noUpdate.has(table));
     if (newExists) {
         // Collision guard. `path` is UNIQUE so two rows for the same directory
         // should never coexist, but if the DB is already inconsistent keep the
-        // destination row's data and fold in the source's non-conflicting children;
-        // conflicting leftovers are removed by CASCADE when the old row is deleted.
+        // destination row's data and fold in the source's non-conflicting children.
         for (const { table, column } of children) {
             db.prepare(`UPDATE OR IGNORE "${table}" SET "${column}" = ? WHERE "${column}" = ?`).run(newId, oldId);
         }
+        // Conflicting leftovers are dropped explicitly rather than left to CASCADE:
+        // tables without a foreign key never cascade, so relying on the parent
+        // delete alone would strand their rows on a dead ID (#1621).
+        deleteWorktreeChildRows(db, [oldId], allChildren);
         db.prepare('DELETE FROM worktrees WHERE id = ?').run(oldId);
         return;
     }
@@ -523,29 +535,38 @@ function getWorktreesByRepository(db, repositoryPath) {
 }
 /**
  * Delete all worktrees for a given repository path
- * Related data is automatically deleted via ON DELETE CASCADE in every table
- * holding a foreign key to worktrees(id) — chat_messages, session_states,
- * worktree_memos, worktree_todos, agent_instances, scheduled_executions,
- * execution_logs, timer_messages and skill_installations (#1430). The live list
- * is whatever `PRAGMA foreign_key_list` reports; see getWorktreeChildTables.
+ * Child rows are deleted explicitly before the parent, for every table
+ * getWorktreeChildTables reports. ON DELETE CASCADE covers only the tables that
+ * declare a foreign key; `tasks`, `verification_runs` and `skill_operations`
+ * hold a `worktree_id` with no constraint and would otherwise survive their
+ * worktree as orphans (#1621). Deleting `verification_runs` still cascades to
+ * `verification_gate_results`, which does declare its foreign key.
  *
  * @param db - Database instance
  * @param repositoryPath - Path of the repository to delete
  * @returns Object containing the count of deleted worktrees
  */
 function deleteRepositoryWorktrees(db, repositoryPath) {
-    const stmt = db.prepare(`
-    DELETE FROM worktrees WHERE repository_path = ?
-  `);
-    const result = stmt.run(repositoryPath);
-    return { deletedCount: result.changes };
+    const run = db.transaction(() => {
+        const ids = db
+            .prepare('SELECT id FROM worktrees WHERE repository_path = ?')
+            .all(repositoryPath)
+            .map((row) => row.id)
+            .filter((id) => id !== null);
+        deleteWorktreeChildRows(db, ids);
+        return db
+            .prepare('DELETE FROM worktrees WHERE repository_path = ?')
+            .run(repositoryPath).changes;
+    });
+    return { deletedCount: run() };
 }
 /**
  * Delete worktrees by their IDs
- * Related data is automatically deleted via ON DELETE CASCADE in every table
- * holding a foreign key to worktrees(id) — including skill_installations, whose
- * rows used to survive the worktree and make a re-created worktree at the same
- * path un-installable (#1430). See getWorktreeChildTables for the live list.
+ * Child rows are deleted explicitly before the parent, for every table
+ * getWorktreeChildTables reports — including skill_installations, whose rows
+ * used to survive the worktree and make a re-created worktree at the same path
+ * un-installable (#1430), and the constraint-less `tasks` / `verification_runs`
+ * / `skill_operations`, which no CASCADE can reach (#1621).
  *
  * @param db - Database instance
  * @param worktreeIds - Array of worktree IDs to delete
@@ -556,9 +577,11 @@ function deleteWorktreesByIds(db, worktreeIds) {
         return { deletedCount: 0 };
     }
     const placeholders = worktreeIds.map(() => '?').join(',');
-    const stmt = db.prepare(`
-    DELETE FROM worktrees WHERE id IN (${placeholders})
-  `);
-    const result = stmt.run(...worktreeIds);
-    return { deletedCount: result.changes };
+    const run = db.transaction(() => {
+        deleteWorktreeChildRows(db, worktreeIds);
+        return db
+            .prepare(`DELETE FROM worktrees WHERE id IN (${placeholders})`)
+            .run(...worktreeIds).changes;
+    });
+    return { deletedCount: run() };
 }

package/dist/server/src/lib/detection/cli-patterns.js

@@ -4,7 +4,7 @@
  * Shared between response-poller.ts and API routes
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CLAUDE_SESSION_ERROR_REGEX_PATTERNS = exports.CLAUDE_SESSION_ERROR_PATTERNS = exports.extractAnsiSequences = exports.stripAnsi = exports.ANTIGRAVITY_SKIP_PATTERNS = exports.ANTIGRAVITY_SELECTION_LIST_PATTERN = exports.ANTIGRAVITY_SEPARATOR_PATTERN = exports.ANTIGRAVITY_THINKING_PATTERN = exports.ANTIGRAVITY_PROMPT_PATTERN = exports.VIBE_LOCAL_THINKING_PATTERN = exports.VIBE_LOCAL_PROMPT_PATTERN = exports.COPILOT_SKIP_PATTERNS = exports.COPILOT_SELECTION_LIST_PATTERN = exports.COPILOT_SEPARATOR_PATTERN = exports.COPILOT_THINKING_PATTERN = exports.COPILOT_PROMPT_PATTERN = exports.OPENCODE_SKIP_PATTERNS = exports.OPENCODE_SEPARATOR_PATTERN = exports.CLAUDE_SELECTION_LIST_FOOTER = exports.CLAUDE_MODEL_OVERLAY_FOOTER_PATTERN = exports.OPENCODE_SELECTION_LIST_PATTERN = exports.OPENCODE_PROCESSING_INDICATOR = exports.OPENCODE_RESPONSE_COMPLETE = exports.OPENCODE_LOADING_PATTERN = exports.OPENCODE_THINKING_PATTERN = exports.OPENCODE_PROMPT_AFTER_RESPONSE = exports.OPENCODE_PROMPT_PATTERN = exports.GEMINI_THINKING_PATTERN = exports.GEMINI_PROMPT_PATTERN = exports.MAX_PASTED_TEXT_RETRIES = exports.PASTED_TEXT_DETECT_DELAY = exports.PASTED_TEXT_PATTERN = exports.CODEX_STATUS_BAR_PATTERN = exports.CODEX_PAGER_FOOTER_PATTERN = exports.CODEX_SELECTION_LIST_PATTERN = exports.CODEX_SEPARATOR_PATTERN = exports.CODEX_DIALOG_PATTERN = exports.CODEX_PROMPT_PATTERN = exports.CLAUDE_TRUST_DIALOG_PATTERN = exports.CLAUDE_SEPARATOR_PATTERN = exports.CLAUDE_PROMPT_PATTERN = exports.CODEX_THINKING_PATTERN = exports.CLAUDE_INTERRUPT_HINT_PATTERN = exports.CLAUDE_THINKING_PATTERN = exports.CLAUDE_SPINNER_CHARS = void 0;
+exports.CLAUDE_SESSION_ERROR_REGEX_PATTERNS = exports.CLAUDE_SESSION_ERROR_PATTERNS = exports.extractAnsiSequences = exports.stripAnsi = exports.ANTIGRAVITY_SKIP_PATTERNS = exports.ANTIGRAVITY_SELECTION_LIST_PATTERN = exports.ANTIGRAVITY_SEPARATOR_PATTERN = exports.ANTIGRAVITY_THINKING_PATTERN = exports.ANTIGRAVITY_PROMPT_PATTERN = exports.VIBE_LOCAL_THINKING_PATTERN = exports.VIBE_LOCAL_PROMPT_PATTERN = exports.COPILOT_SKIP_PATTERNS = exports.COPILOT_SELECTION_LIST_PATTERN = exports.COPILOT_SEPARATOR_PATTERN = exports.COPILOT_THINKING_PATTERN = exports.COPILOT_PROMPT_PATTERN = exports.OPENCODE_SKIP_PATTERNS = exports.OPENCODE_SEPARATOR_PATTERN = exports.CLAUDE_SELECTION_LIST_FOOTER = exports.CLAUDE_MODEL_OVERLAY_FOOTER_PATTERN = exports.OPENCODE_SELECTION_LIST_PATTERN = exports.OPENCODE_PROCESSING_INDICATOR = exports.OPENCODE_RESPONSE_COMPLETE = exports.OPENCODE_LOADING_PATTERN = exports.OPENCODE_THINKING_PATTERN = exports.OPENCODE_PROMPT_AFTER_RESPONSE = exports.OPENCODE_PROMPT_PATTERN = exports.GEMINI_THINKING_PATTERN = exports.GEMINI_PROMPT_PATTERN = exports.MAX_PASTED_TEXT_RETRIES = exports.PASTED_TEXT_DETECT_DELAY = exports.PASTED_TEXT_PATTERN = exports.CODEX_STATUS_BAR_PATTERN = exports.CODEX_PAGER_FOOTER_PATTERN = exports.CODEX_APPROVAL_FOOTER_PATTERN = exports.CODEX_SELECTION_LIST_PATTERN = exports.CODEX_SEPARATOR_PATTERN = exports.CODEX_DIALOG_PATTERN = exports.CODEX_PROMPT_PATTERN = exports.CLAUDE_TRUST_DIALOG_PATTERN = exports.CLAUDE_SEPARATOR_PATTERN = exports.CLAUDE_PROMPT_PATTERN = exports.CODEX_THINKING_PATTERN = exports.CLAUDE_INTERRUPT_HINT_PATTERN = exports.CLAUDE_THINKING_PATTERN = exports.CLAUDE_SPINNER_CHARS = void 0;
 exports.findClaudeChromeStart = findClaudeChromeStart;
 exports.isCodexPromptReady = isCodexPromptReady;
 exports.getCodexActiveDialog = getCodexActiveDialog;
@@ -295,6 +295,29 @@ exports.CODEX_SEPARATOR_PATTERN = /^─.*Worked for.*─+$/m;
  * a numbered prompt (PromptPanel with buttons).
  */
 exports.CODEX_SELECTION_LIST_PATTERN = /press\s+enter\s+to\s+(?:confirm|select)/i;
+/**
+ * Codex CLI approval-request footer pattern (Issue #1628).
+ *
+ * Codex renders an approval request ("Would you like to run the following
+ * command?" / "Would you like to make the following edits?") with the SAME
+ * "Press enter to confirm" footer as a `/model`-style menu, which is why
+ * CODEX_SELECTION_LIST_PATTERN swallows it. The two differ in the escape verb:
+ * an approval request can be *cancelled* (it is the agent asking the human for
+ * permission), a menu can only be *gone back* from.
+ *
+ * Measured on codex-cli 0.146.0 (five consecutive live approval frames captured
+ * from a real session, plus two live `/model` picker frames):
+ *   - approval : "Press enter to confirm or esc to cancel"
+ *   - /model   : "Press enter to confirm or esc to go back"
+ *   - /model   : "Press enter to select reasoning effort, or esc to dismiss."
+ *
+ * Used only as one of two OR'd approval signals (see isCodexApprovalRequest in
+ * status-detector.ts); the other is an interrogative question line, so a future
+ * rewording of either signal alone does not reopen Issue #1628.
+ *
+ * No /g flag (keeps .test() stateless), no nested quantifiers (ReDoS-safe).
+ */
+exports.CODEX_APPROVAL_FOOTER_PATTERN = /esc\s+to\s+cancel/i;
 /**
  * Codex CLI pager / edit-previous (transcript) mode footer pattern (Issue #1017)
  *

package/dist/server/src/lib/detection/status-detector.js

@@ -100,7 +100,8 @@ const CODEX_NUMBERED_OPTION_PATTERN = /^\s*[❯›●]?\s*\d{1,2}[.)]\s/;
  * already-answered prompt left in the 50-line scan window rather than an active one.
  *
  * Codex keeps the answered "1. Yes / 2. No" block + "press number to confirm" footer in
- * its transcript (session historyLimit 50000) instead of repainting it away like Claude,
+ * its transcript (it draws on the normal screen, so tmux retains a scrollback for it —
+ * TMUX_HISTORY_LIMIT lines deep) instead of repainting it away like Claude,
  * so detectPrompt() keeps matching it and detectSessionStatus() reports `waiting` even
  * after the user answered and Codex resumed — the sidebar status dot then stays orange
  * forever (the reported bug).
@@ -147,6 +148,39 @@ function isCodexStalePrompt(contentLines) {
     }
     return lastPromptIdx >= 0 && lastThinkingIdx > lastPromptIdx;
 }
+/**
+ * Issue #1628: decide whether a Codex frame that matched CODEX_SELECTION_LIST_PATTERN
+ * is the agent ASKING FOR APPROVAL rather than the user browsing a menu.
+ *
+ * Why this exists: Codex renders both with a "Press enter to confirm" footer, so the
+ * priority-0.8 selection-list branch (added for `/model` in Issue #622) also swallowed
+ * every approval request and returned `hasActivePrompt: false`. `isPromptWaiting` is the
+ * only blocked-on-a-human signal the current-output payload carries, so `commandmate wait
+ * --on-prompt agent` could never raise exit 10 for a Codex worker sitting on
+ * "Would you like to run the following command?" — it polled until the timeout while the
+ * agent was stopped. Auto-Yes was unaffected because it calls detectPrompt() directly,
+ * which parses these frames correctly; only the status-detector layer lost them.
+ *
+ * Two OR'd signals, both measured against live codex-cli 0.146.0 captures
+ * (5 approval frames from one real session + 2 `/model` picker frames):
+ *   1. an interrogative question line directly above the options
+ *      ("Would you like to run the following command?" → the extracted question ends
+ *      with "?"; a picker's ends with its description, e.g. "…browse all models.")
+ *   2. the approval escape verb ("esc to cancel" vs a menu's "esc to go back" /
+ *      "esc to dismiss")
+ * Either alone covers every measured approval frame, so a rewording of one does not
+ * reopen the bug.
+ *
+ * Gated on `promptDetection.isPrompt` so a frame detectPrompt() could not parse into
+ * options (e.g. the unnumbered "Select a model" list of Issue #619) can never be
+ * promoted to an active prompt.
+ */
+function isCodexApprovalRequest(promptDetection, selectionWindow) {
+    if (!promptDetection.isPrompt)
+        return false;
+    const question = promptDetection.promptData?.question?.trim() ?? '';
+    return question.endsWith('?') || cli_patterns_1.CODEX_APPROVAL_FOOTER_PATTERN.test(selectionWindow);
+}
 /**
  * Detect session status with confidence level
  *
@@ -286,6 +320,21 @@ function detectSessionStatus(output, cliToolId, lastOutputTimestamp) {
             if (cli_patterns_1.CODEX_SELECTION_LIST_PATTERN.test(codexSelectionWindow)) {
                 const codexPromptOptions = (0, cli_patterns_1.buildDetectPromptOptions)(cliToolId);
                 const codexPromptDetection = (0, prompt_detector_1.detectPrompt)((0, cli_patterns_1.stripBoxDrawing)(cleanOutput), codexPromptOptions);
+                // Issue #1628: an approval request wears the same footer as a menu but is the
+                // agent blocked on the human, so it must surface as an active prompt (exit 10
+                // for `wait`, PromptPanel in the UI) instead of a navigable list. The #1160
+                // staleness guard still applies: an ALREADY-ANSWERED approval whose footer is
+                // still inside the window, with Codex running below it, is dead scrollback.
+                if (isCodexApprovalRequest(codexPromptDetection, codexSelectionWindow) &&
+                    !isCodexStalePrompt(contentLines)) {
+                    return {
+                        status: 'waiting',
+                        confidence: 'high',
+                        reason: exports.STATUS_REASON.PROMPT_DETECTED,
+                        hasActivePrompt: true,
+                        promptDetection: codexPromptDetection,
+                    };
+                }
                 return {
                     status: 'waiting',
                     confidence: 'high',
@@ -333,7 +382,8 @@ function detectSessionStatus(output, cliToolId, lastOutputTimestamp) {
     if (promptDetection.isPrompt) {
         // Issue #1160: Codex keeps an ANSWERED approval / numbered-choice block
         // ("1. Yes / 2. No" + "press number to confirm" footer) in its transcript
-        // (historyLimit 50000) instead of repainting it away like Claude. detectPrompt's
+        // (non-alternate-screen, so tmux keeps TMUX_HISTORY_LIMIT lines of scrollback for
+        // it) instead of repainting it away like Claude. detectPrompt's
         // 50-line window then keeps matching that dead prompt, so this priority-1 branch
         // returns `waiting` even after the user answered and Codex resumed — the sidebar
         // status dot stays orange forever (the reported bug). Guard with a position check:

package/dist/server/src/lib/session/claude-session.js

@@ -502,11 +502,13 @@ async function startClaudeSession(options) {
         // (SF-S2-004: Explicit fall-through instead of hidden re-entry)
     }
     try {
-        // Create tmux session with large history buffer for Claude output
+        // Create tmux session. Scrollback depth comes from the shared
+        // TMUX_HISTORY_LIMIT default (Issue #1624) — do not re-hardcode it here.
+        // (Claude itself renders in the alternate screen and keeps history_size at 0,
+        // so the limit is inert for this tool; it still applies to the bare shell.)
         await (0, tmux_1.createSession)({
             sessionName,
             workingDirectory: worktreePath,
-            historyLimit: 50000,
         });
         // SF-S2-003: Sanitize environment after createSession, before launching Claude CLI
         await (0, session_key_sender_1.sanitizeSessionEnvironment)(sessionName);

package/dist/server/src/lib/tmux/read-mode-pager.js

@@ -0,0 +1,161 @@
+"use strict";
+/**
+ * The shell pager that `prefix+g` opens inside a tmux popup (Issue #1623, 案A).
+ *
+ * ## Why the script is embedded here instead of shipped as a file
+ *
+ * `package.json`'s `files` list publishes `bin/`, `dist/`, `.next/`, `public/`,
+ * `scripts/hooks/` and `.env.example` — NOT `scripts/`. A path into the repo
+ * therefore does not exist in a global install, and an `npx` install lives in a
+ * cache directory npm may garbage-collect out from under a long-lived `bind-key`.
+ * Embedding the text and materializing it into `~/.commandmate/bin/` gives the
+ * binding one absolute path that is stable across global / local / npx installs.
+ *
+ * ## Why the squeeze is reimplemented in awk
+ *
+ * The popup must not depend on the CommandMate server, a node binary, or a built
+ * `dist/` — it only has tmux and a shell. awk is present everywhere those are.
+ * The duplication is not left to trust: `tests/unit/lib/tmux/transcript-squeeze.test.ts`
+ * runs THIS awk program over real captures and asserts byte equality with
+ * `squeezeTranscript()`, so the two cannot drift apart silently.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAGER_SCRIPT = exports.PAGER_SCRIPT_FILENAME = exports.SQUEEZE_AWK_PROGRAM = exports.SQUEEZE_AWK_LOCALE = void 0;
+/**
+ * Locale the squeeze awk program MUST run under.
+ *
+ * Not cosmetic — the program is byte-oriented by construction, and `%c` is the
+ * one place where awk implementations disagree about what a "character" is:
+ *
+ * | awk                     | `sprintf("%c", 194)` |
+ * |-------------------------|----------------------|
+ * | mawk, BWK awk           | byte `0xC2`          |
+ * | gawk, `LC_ALL=C`        | byte `0xC2`          |
+ * | gawk, `*.UTF-8` locale  | U+00C2 -> `C3 82`    |
+ *
+ * `NBSP` below is assembled from bytes `C2 A0`, so under gawk in a UTF-8 locale
+ * it becomes a four-byte string that can never match a real NBSP — NBSP-only
+ * rows stop counting as blank and the frame comes back unsqueezed. That is not
+ * hypothetical: it is exactly how this shipped broken, green on macOS (BWK awk)
+ * and red on `ubuntu-latest`, whose `/usr/bin/awk` is gawk (Debian ranks the
+ * gawk alternative above mawk) under a UTF-8 locale.
+ *
+ * Pinning the locale — rather than making the regex match both encodings — is
+ * deliberate: an alternation covering the character form
+ * (`sprintf("%c%c",194,160) "|" sprintf("%c",160)`) fixes gawk but makes BWK awk
+ * abort with `multibyte conversion failure` in a UTF-8 locale. Measured on all
+ * three implementations, `LC_ALL=C` is the only setting where every one of them
+ * agrees, and it is byte-transparent: the same 1000-row fixture comes out with
+ * an identical sha256 from BWK awk, mawk and gawk.
+ *
+ * Scoped to the awk process alone, so `less` and tmux keep the user's locale and
+ * still render UTF-8 box drawing.
+ */
+exports.SQUEEZE_AWK_LOCALE = 'C';
+/**
+ * awk implementation of {@link import('./transcript-squeeze').squeezeTranscript}.
+ *
+ * Mirrors the TypeScript rules exactly:
+ * - `ANSI` is built from `sprintf("%c")` rather than a regex literal because
+ *   `\033` / `\a` escapes inside a regex literal are not portable across awk
+ *   implementations (macOS ships BWK awk, Linux usually gawk/mawk).
+ * - NBSP (UTF-8 `C2 A0`) is folded to a space before trimming, because
+ *   JavaScript's `.trim()` treats U+00A0 as whitespace and awk's `[ \t]` does not.
+ *   Without this the two implementations disagree on NBSP-only rows. This is the
+ *   line that requires {@link SQUEEZE_AWK_LOCALE} — read that doc before editing.
+ * - Leading/trailing blank runs are dropped, runs of 1-2 kept verbatim, runs of
+ *   3+ collapsed to a single row carrying the run's ANSI sequences.
+ */
+exports.SQUEEZE_AWK_PROGRAM = `BEGIN {
+  ESC = sprintf("%c", 27); BEL = sprintf("%c", 7); NBSP = sprintf("%c%c", 194, 160)
+  ANSI = ESC "\\\\[[0-9;]*[a-zA-Z]|" ESC "\\\\][^" BEL "]*" BEL "|\\\\[[0-9;]*m"
+  n = 0
+}
+{ line[++n] = $0 }
+END {
+  for (i = 1; i <= n; i++) {
+    s = line[i]; gsub(ANSI, "", s); gsub(NBSP, " ", s)
+    gsub(/^[ \\t\\r\\f\\v]+|[ \\t\\r\\f\\v]+$/, "", s)
+    blank[i] = (s == "")
+  }
+  seen = 0; i = 1
+  while (i <= n) {
+    if (!blank[i]) { print line[i]; seen = 1; i++; continue }
+    j = i; while (j <= n && blank[j]) j++
+    if (seen && j <= n) {
+      if (j - i <= 2) { for (k = i; k < j; k++) print line[k] }
+      else {
+        joined = ""; for (k = i; k < j; k++) joined = joined line[k]
+        keep = ""
+        while (match(joined, ANSI)) {
+          keep = keep substr(joined, RSTART, RLENGTH); joined = substr(joined, RSTART + RLENGTH)
+        }
+        print keep
+      }
+    }
+    i = j
+  }
+}`;
+/** Basename of the materialized script. */
+exports.PAGER_SCRIPT_FILENAME = 'cm-read-pane.sh';
+/**
+ * Full text of the pager script.
+ *
+ * Session resolution is done INSIDE the script on purpose. `display-popup` does
+ * NOT expand tmux formats in its shell-command (measured on 3.5a: a literal
+ * `#{session_name}` reaches the shell unexpanded), so the session cannot be baked
+ * into the binding. `tmux display-message -p` inside the popup returns the correct
+ * session and client, which is what makes one global binding serve every session.
+ *
+ * `=NAME:` is the exact-match target form required by Issue #1156 — a bare name
+ * prefix-matches and would show the `-2` instance's pane while the primary is
+ * stopped.
+ */
+exports.PAGER_SCRIPT = `#!/bin/sh
+# CommandMate reading mode (Issue #1623) — generated file, edits are overwritten.
+#
+# Renders the transcript of a CommandMate tmux session with layout-only blank rows
+# squeezed away, so a pager lands on the composer instead of hundreds of rows of
+# padding. Invoked by \`prefix+g\` through \`display-popup -E\`; also runnable by hand:
+#
+#   sh ~/.commandmate/bin/${exports.PAGER_SCRIPT_FILENAME} mcbd-claude-my-worktree
+#
+# The popup is a SNAPSHOT. Press the key again to refresh it.
+set -u
+
+SESSION="\${1:-}"
+if [ -z "$SESSION" ]; then
+  SESSION=$(tmux display-message -p '#{session_name}' 2>/dev/null) || SESSION=""
+fi
+if [ -z "$SESSION" ]; then
+  echo "cm-read-pane: no tmux session given and none could be resolved" >&2
+  exit 1
+fi
+
+LINES_BACK="\${CM_READ_LINES:-1000}"
+case "$LINES_BACK" in
+  ''|*[!0-9]*) LINES_BACK=1000 ;;
+esac
+
+if [ -n "\${CM_READ_PAGER:-}" ]; then
+  PAGER_CMD="$CM_READ_PAGER"
+elif command -v less >/dev/null 2>&1; then
+  PAGER_CMD="less -R +G"
+else
+  PAGER_CMD="cat"
+fi
+
+# LC_ALL is pinned for awk ONLY (not for less, which still renders UTF-8 box
+# drawing in the user's locale). Under gawk in a UTF-8 locale, sprintf("%c",194)
+# yields U+00C2 rather than the byte 0xC2 and the NBSP fold below silently stops
+# matching. See SQUEEZE_AWK_LOCALE in read-mode-pager.ts.
+tmux capture-pane -pe -t "=$SESSION:" -S "-$LINES_BACK" -E - \\
+  | LC_ALL=${exports.SQUEEZE_AWK_LOCALE} awk '${exports.SQUEEZE_AWK_PROGRAM}' \\
+  | $PAGER_CMD
+
+# Without a pager the popup would close before anything could be read.
+if [ "$PAGER_CMD" = "cat" ]; then
+  printf '\\n[CommandMate] end of transcript — press Enter to close.' >&2
+  read -r _unused || true
+fi
+`;