commandmate 0.26.0 → 0.27.0

package/dist/lib/cli-tools/copilot-executable.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * Where GitHub Copilot CLI actually is, and whether it is actually there
+ * (Issue #1907).
+ *
+ * ## Why this is not `gh copilot --help`
+ *
+ * `CopilotTool.isInstalled()` used to answer "is copilot installed?" with
+ * `gh --version` followed by `gh copilot --help`. Measured on gh 2.86.0 with an
+ * empty `gh extension list`, the second command exits 0 in ~20 ms on a machine
+ * where the extension does not exist, because `copilot` is no longer an
+ * extension at all -- it is a preview command built into `gh`, and the help text
+ * it prints says so itself:
+ *
+ * > If already installed, `gh` will execute the Copilot CLI found in your
+ * > `PATH`. If the Copilot CLI is not installed, it will be downloaded to
+ * > ~/.local/share/gh/copilot.
+ *
+ * So the old check proved that `gh` was installed and nothing more. The
+ * consequence was not a wrong badge: `startSession` typed `gh copilot` into the
+ * pane, gh started *downloading* copilot there, `waitForReady` spun its whole
+ * window against a progress bar, and the launch was logged as a success.
+ *
+ * This module answers the question with positive evidence instead (方針書 §4
+ * D1): an executable file that exists, and a `--version` that exits 0 and prints
+ * a version. Nothing here infers presence from the absence of an error.
+ *
+ * ## Why the path is resolved before it is run
+ *
+ * `copilot` is a common word and the probe runs with the server's privileges, so
+ * the candidate is resolved out of `PATH` to an absolute path first, checked to
+ * be an executable *file*, and only then handed to `execFile` with a bounded
+ * timeout, a bounded `maxBuffer` and `sanitizeEnvForChildProcess()`. This is the
+ * rule 方針書 §10.11 / DR4-010 states for version probes; it applies here for the
+ * same reason, since this is the probe that decides what gets launched.
+ *
+ * @module lib/cli-tools/copilot-executable
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.COPILOT_VERSION_PROBE_TIMEOUT_MS = void 0;
+exports.findExecutableOnPath = findExecutableOnPath;
+exports.resolveCopilotExecutable = resolveCopilotExecutable;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const env_sanitizer_1 = require("../security/env-sanitizer");
+/** Executable name on `PATH`. */
+const COPILOT_BINARY_NAME = 'copilot';
+/** gh's own executable name; the `gh-managed` copy is launched through it. */
+const GH_BINARY_NAME = 'gh';
+/** Budget for one `--version` call. Matches the old two-stage check's per-stage timeout. */
+exports.COPILOT_VERSION_PROBE_TIMEOUT_MS = 5000;
+/** Bounded output for the probe (DR4-009): `--version` prints two short lines. */
+const COPILOT_VERSION_PROBE_MAX_BUFFER = 64 * 1024;
+/**
+ * The version in `GitHub Copilot CLI 1.0.80.` — required, not optional.
+ *
+ * An exit code of 0 alone is what made the previous check useless, so a
+ * `--version` that succeeds while printing nothing recognisable is treated as no
+ * evidence at all.
+ */
+const COPILOT_VERSION_PATTERN = /(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?)/;
+/** True when `candidate` is a regular file this process may execute. */
+function isExecutableFile(candidate) {
+    try {
+        if (!(0, fs_1.statSync)(candidate).isFile())
+            return false;
+        (0, fs_1.accessSync)(candidate, fs_1.constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * First executable named `name` on `PATH`, as an absolute path.
+ *
+ * Exported since Issue #1929: `DETECTOR_VERSION_PROBES` has to resolve every
+ * probe command the same way before executing it (DR4-010 (2)), and a second
+ * copy of this walk is exactly the "two probe mechanisms with different trust
+ * models" DR4-010 exists to prevent. The name stays generic because the walk
+ * is; what is copilot-specific is the caller below.
+ */
+function findExecutableOnPath(name) {
+    const rawPath = process.env.PATH;
+    if (!rawPath)
+        return null;
+    for (const directory of rawPath.split(path_1.delimiter)) {
+        if (!directory)
+            continue;
+        const candidate = (0, path_1.join)(directory, name);
+        if (isExecutableFile(candidate))
+            return candidate;
+    }
+    return null;
+}
+/**
+ * Where `gh copilot` puts the copy it downloads.
+ *
+ * gh names `~/.local/share/gh/copilot` in its own help output and honours
+ * `XDG_DATA_HOME`. Both a bare file at that path and a directory containing the
+ * binary are accepted, because which of the two gh writes is gh's business and
+ * guessing wrong here would silently report "not installed".
+ */
+function ghManagedCandidates() {
+    const dataHome = process.env.XDG_DATA_HOME || (0, path_1.join)((0, os_1.homedir)(), '.local', 'share');
+    const base = (0, path_1.join)(dataHome, 'gh', COPILOT_BINARY_NAME);
+    return [base, (0, path_1.join)(base, COPILOT_BINARY_NAME)];
+}
+/** Run `<executable> --version`; the version string, or null for any failure. */
+function probeVersion(executable) {
+    return new Promise((resolve) => {
+        (0, child_process_1.execFile)(executable, ['--version'], {
+            timeout: exports.COPILOT_VERSION_PROBE_TIMEOUT_MS,
+            maxBuffer: COPILOT_VERSION_PROBE_MAX_BUFFER,
+            env: (0, env_sanitizer_1.sanitizeEnvForChildProcess)(),
+        }, (error, stdout, stderr) => {
+            if (error) {
+                resolve(null);
+                return;
+            }
+            const match = COPILOT_VERSION_PATTERN.exec(`${stdout ?? ''}\n${stderr ?? ''}`);
+            resolve(match ? match[1] : null);
+        });
+    });
+}
+/**
+ * The copilot this machine would actually run, or null when there is none.
+ *
+ * `PATH` first, gh's managed copy second — the order the operator experiences,
+ * and the order gh itself uses. Never throws: an unreadable directory, a missing
+ * `PATH`, a probe that times out are all "no evidence", which is the answer that
+ * makes `startSession` refuse instead of starting a download in the pane.
+ */
+async function resolveCopilotExecutable() {
+    const onPath = findExecutableOnPath(COPILOT_BINARY_NAME);
+    if (onPath) {
+        const version = await probeVersion(onPath);
+        if (version)
+            return { path: onPath, version, source: 'path' };
+    }
+    // The managed copy is only reachable through `gh copilot`, so a machine
+    // without gh cannot launch it however present the file is.
+    if (!findExecutableOnPath(GH_BINARY_NAME))
+        return null;
+    for (const candidate of ghManagedCandidates()) {
+        if (!isExecutableFile(candidate))
+            continue;
+        const version = await probeVersion(candidate);
+        if (version)
+            return { path: candidate, version, source: 'gh-managed' };
+    }
+    return null;
+}

package/dist/lib/cli-tools/types.d.ts

@@ -1,6 +1,7 @@
 /**
  * Type definitions and interfaces for CLI tools
  */
+import type { CaptureSpec, ComposerSpec, GracefulExitSpec } from '../../types/cli-tool-contracts';
 /**
  * CLI Tool IDs constant array
  * T2.1: Single source of truth for CLI tool IDs
@@ -20,6 +21,44 @@ export type CLIToolType = typeof CLI_TOOL_IDS[number];
  * @returns True when line counts must not be used for deduplication
  */
 export declare function usesAlternateScreen(cliToolId: CLIToolType): boolean;
+/**
+ * Whether a stored `last_captured_line` still indexes into THIS capture, i.e.
+ * whether it may be used as a "how far have I read" cursor (Issue #1910).
+ *
+ * Two independent things pin a captured line count so it stops growing with the
+ * transcript, and a caller that slices at the stored cursor has to survive both:
+ *
+ *  - **the tool renders in the alternate screen** ({@link usesAlternateScreen}):
+ *    tmux keeps no scrollback, every capture returns exactly `pane_height` rows,
+ *    and the count is pinned there from the very first frame (Issue #1268);
+ *  - **the capture window saturated** (`isCaptureWindowSaturated` in
+ *    `lib/tmux/tmux-capture-cache.ts`): the pane outgrew the sliding window the
+ *    capture is taken through, so the count is pinned at the window size and the
+ *    window merely slides (Issue #1670).
+ *
+ * Either one makes a previously stored index denote a different line — or no
+ * line at all — so `lines.slice(cursor)` silently yields nothing. That is
+ * Issue #1910: `commandmate capture <id>` printed a single empty byte for every
+ * alternate-screen session that had taken one turn, because the poller had
+ * stored the pane height (1000 on copilot / claude, 200 on opencode) and the
+ * next frame is exactly that many rows.
+ *
+ * A caller that reads `false` must fall back to the WHOLE capture: repeating
+ * rows the reader has already seen is harmless, dropping new output is not.
+ *
+ * The two conditions are stated together here rather than at each call site
+ * because they are one rule — "is the count a cursor?" — reached from two
+ * sides, and #1670 fixed only the second one in
+ * `src/lib/session/current-output-builder.ts` while `src/lib/polling/
+ * response-checker.ts` (which spells the same expression inline as
+ * `lineCountIsCursor`) already had both. Folding that second copy in here is
+ * left to the next change that touches the poller.
+ *
+ * @param cliToolId - CLI tool the capture came from
+ * @param captureWindowSaturated - Whether this capture came back clipped by the window
+ * @returns True when the stored line count is still a usable cursor
+ */
+export declare function capturedLineCountIsCursor(cliToolId: CLIToolType, captureWindowSaturated: boolean): boolean;
 /**
  * Maximum number of agent instances allowed per worktree (Issue #868).
  * Caps how many concurrent sessions — including multiple instances of the same
@@ -159,6 +198,28 @@ export interface ICLITool {
      * @param instanceId - Agent instance ID (Issue #868). Defaults to the primary instance.
      */
     interrupt(worktreeId: string, instanceId?: string): Promise<void>;
+    /**
+     * Describe this tool's input box (Issue #1933, §6.3).
+     *
+     * How the composer is recognised on a captured frame, how many rows a submit
+     * read-back must ask for, whether it may be emptied before typing, and how
+     * many Enter presses submit. `sendMessageWithSubmitVerification` takes the
+     * result, which is what keeps the four facts in one declaration per tool
+     * instead of in four tables keyed on {@link CLIToolType}.
+     */
+    describeComposer(): ComposerSpec;
+    /**
+     * Describe how this tool is asked to quit (Issue #1933, §13.2).
+     *
+     * The keystrokes, the shutdown window they need, and whether the tool owns a
+     * loopback server whose port must be confirmed dead before it is reused.
+     */
+    gracefulExitSequence(): GracefulExitSpec;
+    /**
+     * Describe what a status capture of this tool must ask tmux for
+     * (Issue #1933, §10.12).
+     */
+    captureSpec(): CaptureSpec;
 }
 /**
  * CLI tool display names for UI rendering

package/dist/lib/cli-tools/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/cli-tools/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY,4FAA6F,CAAC;AAEvH;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAuBtD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAEnE;AAMD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM,CAK1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAE/F;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CAGpF;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IAEzB,iBAAiB;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhC;;;;;OAKG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErE;;;;;OAKG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3F;;;;;OAKG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF;;;;OAIG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;;OAKG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhE;;;;OAIG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAQ9D,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,CAE7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,MAAM,CAI5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAM3F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9E,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,WAAW,GAC3B,MAAM,CAGR;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,aAAa,EAAE,CAO/F;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,UAAU,CAAC;AAErD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAO7E;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,QAAmC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,QAAQ;IACpD,6CAA6C;IAC7C,aAAa,IAAI,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClH;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,IAAI,oBAAoB,CAIlF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,eAAe;IACf,EAAE,EAAE,WAAW,CAAC;IAChB,UAAU;IACV,IAAI,EAAE,MAAM,CAAC;IACb,YAAY;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/cli-tools/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AAExC;;;;GAIG;AACH,eAAO,MAAM,YAAY,4FAA6F,CAAC;AAEvH;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAuBtD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO,CAEnE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,WAAW,EACtB,sBAAsB,EAAE,OAAO,GAC9B,OAAO,CAET;AAMD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;GAEG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,QAAqB,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM,CAK1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAE/F;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CAGpF;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IAEzB,iBAAiB;IACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhC;;;;;OAKG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErE;;;;;OAKG;IACH,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3F;;;;;OAKG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF;;;;OAIG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE;;;;;OAKG;IACH,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEhE;;;;OAIG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE;;;;;;;;OAQG;IACH,gBAAgB,IAAI,YAAY,CAAC;IAEjC;;;;;OAKG;IACH,oBAAoB,IAAI,gBAAgB,CAAC;IAEzC;;;OAGG;IACH,WAAW,IAAI,WAAW,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAQ9D,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,WAAW,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,WAAW,GAAG,MAAM,CAE7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAc,GAAG,MAAM,CAI5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAM3F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAC9E,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,WAAW,GAC3B,MAAM,CAGR;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,aAAa,EAAE,CAO/F;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,UAAU,CAAC;AAErD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAO7E;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,QAAmC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,QAAQ;IACpD,6CAA6C;IAC7C,aAAa,IAAI,IAAI,CAAC;IACtB;;;;;;OAMG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClH;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,IAAI,oBAAoB,CAIlF;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,eAAe;IACf,EAAE,EAAE,WAAW,CAAC;IAChB,UAAU;IACV,IAAI,EAAE,MAAM,CAAC;IACb,YAAY;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/dist/lib/cli-tools/types.js

@@ -5,6 +5,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OLLAMA_MODEL_PATTERN = exports.VIBE_LOCAL_CONTEXT_WINDOW_MAX = exports.VIBE_LOCAL_CONTEXT_WINDOW_MIN = exports.CLI_TOOL_DISPLAY_NAMES = exports.MAX_INSTANCE_ID_LENGTH = exports.INSTANCE_ID_PATTERN = exports.MAX_AGENT_ALIAS_LENGTH = exports.MAX_AGENT_INSTANCES = exports.CLI_TOOL_IDS = void 0;
 exports.usesAlternateScreen = usesAlternateScreen;
+exports.capturedLineCountIsCursor = capturedLineCountIsCursor;
 exports.isValidInstanceId = isValidInstanceId;
 exports.getPrimaryInstanceId = getPrimaryInstanceId;
 exports.isPrimaryInstance = isPrimaryInstance;
@@ -54,6 +55,46 @@ const ALTERNATE_SCREEN_CLI_TOOLS = new Set([
 function usesAlternateScreen(cliToolId) {
     return ALTERNATE_SCREEN_CLI_TOOLS.has(cliToolId);
 }
+/**
+ * Whether a stored `last_captured_line` still indexes into THIS capture, i.e.
+ * whether it may be used as a "how far have I read" cursor (Issue #1910).
+ *
+ * Two independent things pin a captured line count so it stops growing with the
+ * transcript, and a caller that slices at the stored cursor has to survive both:
+ *
+ *  - **the tool renders in the alternate screen** ({@link usesAlternateScreen}):
+ *    tmux keeps no scrollback, every capture returns exactly `pane_height` rows,
+ *    and the count is pinned there from the very first frame (Issue #1268);
+ *  - **the capture window saturated** (`isCaptureWindowSaturated` in
+ *    `lib/tmux/tmux-capture-cache.ts`): the pane outgrew the sliding window the
+ *    capture is taken through, so the count is pinned at the window size and the
+ *    window merely slides (Issue #1670).
+ *
+ * Either one makes a previously stored index denote a different line — or no
+ * line at all — so `lines.slice(cursor)` silently yields nothing. That is
+ * Issue #1910: `commandmate capture <id>` printed a single empty byte for every
+ * alternate-screen session that had taken one turn, because the poller had
+ * stored the pane height (1000 on copilot / claude, 200 on opencode) and the
+ * next frame is exactly that many rows.
+ *
+ * A caller that reads `false` must fall back to the WHOLE capture: repeating
+ * rows the reader has already seen is harmless, dropping new output is not.
+ *
+ * The two conditions are stated together here rather than at each call site
+ * because they are one rule — "is the count a cursor?" — reached from two
+ * sides, and #1670 fixed only the second one in
+ * `src/lib/session/current-output-builder.ts` while `src/lib/polling/
+ * response-checker.ts` (which spells the same expression inline as
+ * `lineCountIsCursor`) already had both. Folding that second copy in here is
+ * left to the next change that touches the poller.
+ *
+ * @param cliToolId - CLI tool the capture came from
+ * @param captureWindowSaturated - Whether this capture came back clipped by the window
+ * @returns True when the stored line count is still a usable cursor
+ */
+function capturedLineCountIsCursor(cliToolId, captureWindowSaturated) {
+    return !usesAlternateScreen(cliToolId) && !captureWindowSaturated;
+}
 // ============================================================================
 // Agent Instances (Issue #868: multi-session foundation)
 // ============================================================================

package/dist/lib/detection/ansi.d.ts

@@ -9,7 +9,8 @@
  *
  * Covers:
  * - SGR sequences: ESC[Nm (colors, bold, underline, etc.)
- * - OSC sequences: ESC]...BEL (window title, hyperlinks, etc.)
+ * - OSC sequences: ESC]...BEL and ESC]...ST (ESC \\) - window title, and the
+ *   OSC 8 hyperlinks that claude/codex/copilot emit (Issue #1912)
  * - CSI sequences: ESC[...letter (cursor movement, erase, etc.)
  *
  * Known limitations (SEC-002): 8-bit CSI (0x9B), DEC private modes (ESC[?25h),

package/dist/lib/detection/ansi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ansi.d.ts","sourceRoot":"","sources":["../../../src/lib/detection/ansi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,YAAY,QAAyD,CAAC;AAEnF,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGxD"}
+{"version":3,"file":"ansi.d.ts","sourceRoot":"","sources":["../../../src/lib/detection/ansi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,YAAY,QAC8C,CAAC;AAExE,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGxD"}

package/dist/lib/detection/ansi.js

@@ -10,7 +10,8 @@
  *
  * Covers:
  * - SGR sequences: ESC[Nm (colors, bold, underline, etc.)
- * - OSC sequences: ESC]...BEL (window title, hyperlinks, etc.)
+ * - OSC sequences: ESC]...BEL and ESC]...ST (ESC \\) - window title, and the
+ *   OSC 8 hyperlinks that claude/codex/copilot emit (Issue #1912)
  * - CSI sequences: ESC[...letter (cursor movement, erase, etc.)
  *
  * Known limitations (SEC-002): 8-bit CSI (0x9B), DEC private modes (ESC[?25h),
@@ -21,7 +22,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ANSI_PATTERN = void 0;
 exports.stripAnsi = stripAnsi;
 exports.extractAnsiSequences = extractAnsiSequences;
-exports.ANSI_PATTERN = /\x1b\[[0-9;]*[a-zA-Z]|\x1b\][^\x07]*\x07|\[[0-9;]*m/g;
+exports.ANSI_PATTERN = /\x1b\[[0-9;]*[a-zA-Z]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\[[0-9;]*m/g;
 /** Remove all ANSI escape sequences from a string. */
 function stripAnsi(str) {
     return str.replace(exports.ANSI_PATTERN, '');

package/dist/lib/detection/tools/verified-against.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Which build of which CLI every tool module's rules were read off (Issue #1929).
+ *
+ * #1927 gave each tool module a `verifiedAgainst` stamp and declared it inline —
+ * claude's in `claude/patterns.ts`, the other four at the top of their
+ * `detect.ts`. That is the right place to *read* it when you are looking at a
+ * rule, and the wrong place to *collect* it: §4 D2's staleness probe has to
+ * compare "the version the rules were measured against" with "the version that
+ * is installed", and it needs the first as data, for every tool, at once.
+ *
+ * So the values move here and each tool module re-exports its own. The stamp
+ * still lives one import away from the rules it describes, and there is exactly
+ * one copy of it — `tests/unit/detection/tools/detector-contract.test.ts` pins
+ * that the detectors' `verifiedAgainst` and this table are the same objects, so
+ * the two cannot drift.
+ *
+ * ## Why this module imports nothing
+ *
+ * `commandmate status` is one of the two surfaces §4 D2 exposes the staleness
+ * on, and `tsconfig.cli.json` compiles the CLI with `"paths": {}`. A module the
+ * CLI bundle reaches may therefore not use the `@/` alias — see the same
+ * constraint written out in `src/cli/types/api-responses.ts`. `tools/types.ts`
+ * (where {@link DetectorProvenance} lives) imports `@/lib/cli-tools/types`, so
+ * these constants are left unannotated and match that interface structurally
+ * instead of importing it.
+ */
+/** claude these rules were read off (#1708 / #1927 fixtures). */
+export declare const CLAUDE_VERIFIED_AGAINST: {
+    readonly version: "2.1.240";
+    readonly capturedAt: "2026-08-23";
+    readonly paneGeometry: "200x1000";
+};
+/** codex-cli these rules were read off (#1628 / #1829 / #1890 fixtures). */
+export declare const CODEX_VERIFIED_AGAINST: {
+    readonly version: "0.148.0";
+    readonly capturedAt: "2026-08-15";
+    readonly paneGeometry: "200x1000";
+};
+/** copilot-cli these rules were read off (#1885 / #1895 fixtures). */
+export declare const COPILOT_VERIFIED_AGAINST: {
+    readonly version: "1.0.80";
+    readonly capturedAt: "2026-08-21";
+    readonly paneGeometry: "200x1000";
+};
+/** opencode these rules were read off (#1883 / #1893 / #1896 fixtures). */
+export declare const OPENCODE_VERIFIED_AGAINST: {
+    readonly version: "1.18.21";
+    readonly capturedAt: "2026-08-21";
+    readonly paneGeometry: "80x200";
+};
+/** agy these rules were read off (#988 / #995). */
+export declare const ANTIGRAVITY_VERIFIED_AGAINST: {
+    readonly version: "0.4.x";
+    readonly capturedAt: "2026-07-30";
+    readonly paneGeometry: "inline";
+};
+/**
+ * The stamp for a tool whose frames nobody has captured yet.
+ *
+ * Not a version, on purpose. `parseCliVersion` cannot read `'unmeasured'`, so a
+ * tool carrying it is reported by {@link getDetectorFreshness} with a null
+ * comparison rather than as fresh — "we never measured this" and "we measured it
+ * and it is current" are different answers and must not print the same.
+ */
+export declare const UNMEASURED_VERIFIED_AGAINST: {
+    readonly version: "unmeasured";
+    readonly capturedAt: "never";
+    readonly paneGeometry: "unmeasured";
+};
+/** The shape every entry above satisfies (structurally `DetectorProvenance`). */
+export interface VerifiedAgainstStamp {
+    readonly version: string;
+    readonly capturedAt: string;
+    readonly paneGeometry: string;
+}
+/**
+ * Tool id → the build its rules were measured against.
+ *
+ * Keyed by the catalog / `CLIToolType` id, not by executable name: antigravity's
+ * binary is `agy` (DR2-023), and that mapping belongs to the probe table, not
+ * here.
+ */
+export declare const DETECTOR_VERIFIED_AGAINST: Readonly<Record<string, VerifiedAgainstStamp>>;
+//# sourceMappingURL=verified-against.d.ts.map

package/dist/lib/detection/tools/verified-against.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-against.d.ts","sourceRoot":"","sources":["../../../../src/lib/detection/tools/verified-against.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,iEAAiE;AACjE,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AAEX,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB;;;;CAIzB,CAAC;AAEX,sEAAsE;AACtE,eAAO,MAAM,wBAAwB;;;;CAI3B,CAAC;AAEX,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB;;;;CAI5B,CAAC;AAEX,mDAAmD;AACnD,eAAO,MAAM,4BAA4B;;;;CAI/B,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B;;;;CAI9B,CAAC;AAEX,iFAAiF;AACjF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAQpF,CAAC"}

package/dist/lib/detection/tools/verified-against.js

@@ -0,0 +1,88 @@
+"use strict";
+/**
+ * Which build of which CLI every tool module's rules were read off (Issue #1929).
+ *
+ * #1927 gave each tool module a `verifiedAgainst` stamp and declared it inline —
+ * claude's in `claude/patterns.ts`, the other four at the top of their
+ * `detect.ts`. That is the right place to *read* it when you are looking at a
+ * rule, and the wrong place to *collect* it: §4 D2's staleness probe has to
+ * compare "the version the rules were measured against" with "the version that
+ * is installed", and it needs the first as data, for every tool, at once.
+ *
+ * So the values move here and each tool module re-exports its own. The stamp
+ * still lives one import away from the rules it describes, and there is exactly
+ * one copy of it — `tests/unit/detection/tools/detector-contract.test.ts` pins
+ * that the detectors' `verifiedAgainst` and this table are the same objects, so
+ * the two cannot drift.
+ *
+ * ## Why this module imports nothing
+ *
+ * `commandmate status` is one of the two surfaces §4 D2 exposes the staleness
+ * on, and `tsconfig.cli.json` compiles the CLI with `"paths": {}`. A module the
+ * CLI bundle reaches may therefore not use the `@/` alias — see the same
+ * constraint written out in `src/cli/types/api-responses.ts`. `tools/types.ts`
+ * (where {@link DetectorProvenance} lives) imports `@/lib/cli-tools/types`, so
+ * these constants are left unannotated and match that interface structurally
+ * instead of importing it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DETECTOR_VERIFIED_AGAINST = exports.UNMEASURED_VERIFIED_AGAINST = exports.ANTIGRAVITY_VERIFIED_AGAINST = exports.OPENCODE_VERIFIED_AGAINST = exports.COPILOT_VERIFIED_AGAINST = exports.CODEX_VERIFIED_AGAINST = exports.CLAUDE_VERIFIED_AGAINST = void 0;
+/** claude these rules were read off (#1708 / #1927 fixtures). */
+exports.CLAUDE_VERIFIED_AGAINST = {
+    version: '2.1.240',
+    capturedAt: '2026-08-23',
+    paneGeometry: '200x1000',
+};
+/** codex-cli these rules were read off (#1628 / #1829 / #1890 fixtures). */
+exports.CODEX_VERIFIED_AGAINST = {
+    version: '0.148.0',
+    capturedAt: '2026-08-15',
+    paneGeometry: '200x1000',
+};
+/** copilot-cli these rules were read off (#1885 / #1895 fixtures). */
+exports.COPILOT_VERIFIED_AGAINST = {
+    version: '1.0.80',
+    capturedAt: '2026-08-21',
+    paneGeometry: '200x1000',
+};
+/** opencode these rules were read off (#1883 / #1893 / #1896 fixtures). */
+exports.OPENCODE_VERIFIED_AGAINST = {
+    version: '1.18.21',
+    capturedAt: '2026-08-21',
+    paneGeometry: '80x200',
+};
+/** agy these rules were read off (#988 / #995). */
+exports.ANTIGRAVITY_VERIFIED_AGAINST = {
+    version: '0.4.x',
+    capturedAt: '2026-07-30',
+    paneGeometry: 'inline',
+};
+/**
+ * The stamp for a tool whose frames nobody has captured yet.
+ *
+ * Not a version, on purpose. `parseCliVersion` cannot read `'unmeasured'`, so a
+ * tool carrying it is reported by {@link getDetectorFreshness} with a null
+ * comparison rather than as fresh — "we never measured this" and "we measured it
+ * and it is current" are different answers and must not print the same.
+ */
+exports.UNMEASURED_VERIFIED_AGAINST = {
+    version: 'unmeasured',
+    capturedAt: 'never',
+    paneGeometry: 'unmeasured',
+};
+/**
+ * Tool id → the build its rules were measured against.
+ *
+ * Keyed by the catalog / `CLIToolType` id, not by executable name: antigravity's
+ * binary is `agy` (DR2-023), and that mapping belongs to the probe table, not
+ * here.
+ */
+exports.DETECTOR_VERIFIED_AGAINST = {
+    claude: exports.CLAUDE_VERIFIED_AGAINST,
+    codex: exports.CODEX_VERIFIED_AGAINST,
+    copilot: exports.COPILOT_VERIFIED_AGAINST,
+    opencode: exports.OPENCODE_VERIFIED_AGAINST,
+    antigravity: exports.ANTIGRAVITY_VERIFIED_AGAINST,
+    gemini: exports.UNMEASURED_VERIFIED_AGAINST,
+    'vibe-local': exports.UNMEASURED_VERIFIED_AGAINST,
+};