commandmate 0.47.0 → 0.47.2

package/dist/server/src/lib/polling/response-checker-blank-response.js

@@ -0,0 +1,30 @@
+"use strict";
+/**
+ * The blank-response skips of `checkForResponse` (Issue #3784 split from
+ * response-checker.ts).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isBlankExtractedResponse = isBlankExtractedResponse;
+exports.isBlankCleanedResponse = isBlankCleanedResponse;
+exports.recordBlankResponseSkip = recordBlankResponseSkip;
+const db_1 = require("../../lib/db");
+const response_dedup_1 = require("./response-dedup");
+/** True when the extracted response has no content. */
+function isBlankExtractedResponse(response) {
+    return !response || response.trim() === '';
+}
+/** True when the cleaned response is empty or just "[No content]". */
+function isBlankCleanedResponse(cleanedResponse) {
+    return !cleanedResponse || cleanedResponse.trim() === '' || cleanedResponse === '[No content]';
+}
+/**
+ * What a blank response leaves behind: the run of duplicate response ticks is
+ * over and the cursor moves to this capture. Written only by a tick that still
+ * owns the poller.
+ */
+function recordBlankResponseSkip(db, worktreeId, cliToolId, resolvedInstanceId, pollerKey, lineCount, owns) {
+    if (owns) {
+        (0, response_dedup_1.resetDuplicateResponseSkipStreak)(pollerKey);
+        (0, db_1.updateSessionState)(db, worktreeId, cliToolId, lineCount, resolvedInstanceId);
+    }
+}

package/dist/server/src/lib/polling/response-checker.js

@@ -66,6 +66,7 @@ const upstream_faults_1 = require("../../lib/detection/upstream-faults");
 const waiting_push_notifier_1 = require("../../lib/push/waiting-push-notifier");
 const waiting_episode_state_1 = require("../../lib/session/waiting-episode-state");
 const task_transition_service_1 = require("../../lib/tasks/task-transition-service");
+const response_checker_blank_response_1 = require("./response-checker-blank-response");
 /**
  * How many rows from the bottom of a capture the upstream-fault check reads
  * (Issue #2000).
@@ -1366,12 +1367,9 @@ async function checkForResponse(worktreeId, cliToolId, instanceId) {
         if (owns)
             (0, prompt_dedup_1.resetDuplicatePromptSkipStreak)(pollerKey);
         // Validate response content is not empty
-        if (!result.response || result.response.trim() === '') {
+        if ((0, response_checker_blank_response_1.isBlankExtractedResponse)(result.response)) {
             // Issue #3552: an empty response is not the saved reply either.
-            if (owns) {
-                (0, response_dedup_1.resetDuplicateResponseSkipStreak)(pollerKey);
-                (0, db_1.updateSessionState)(db, worktreeId, cliToolId, result.lineCount, resolvedInstanceId);
-            }
+            (0, response_checker_blank_response_1.recordBlankResponseSkip)(db, worktreeId, cliToolId, resolvedInstanceId, pollerKey, result.lineCount, owns);
             return false;
         }
         // Parse Claude-specific metadata
@@ -1380,12 +1378,9 @@ async function checkForResponse(worktreeId, cliToolId, instanceId) {
             : undefined;
         const cleanedResponse = cleanCompletedResponse(cliToolId, result, pollerKey, owns);
         // If cleaned response is empty or just "[No content]", skip saving
-        if (!cleanedResponse || cleanedResponse.trim() === '' || cleanedResponse === '[No content]') {
+        if ((0, response_checker_blank_response_1.isBlankCleanedResponse)(cleanedResponse)) {
             // Issue #3552: nor is one that cleans down to nothing.
-            if (owns) {
-                (0, response_dedup_1.resetDuplicateResponseSkipStreak)(pollerKey);
-                (0, db_1.updateSessionState)(db, worktreeId, cliToolId, result.lineCount, resolvedInstanceId);
-            }
+            (0, response_checker_blank_response_1.recordBlankResponseSkip)(db, worktreeId, cliToolId, resolvedInstanceId, pollerKey, result.lineCount, owns);
             // Left as it was (Issue #3705 sets it aside as harmless): nothing sets the
             // in-progress id to a non-null value or reads it today.
             (0, db_1.clearInProgressMessageId)(db, worktreeId, cliToolId, resolvedInstanceId);

package/dist/server/src/lib/prompt-observation/appearance.js

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * Which appearance of a screen an observation saw (Issue #3755).
+ *
+ * The same trust screen can open, be answered, and open again with every word
+ * the same — and a token issued on the first one must not answer the second.
+ * The server keeps, per instance, the fingerprint of the decision screen it
+ * last observed (kind, question, options, approval target, pane, generation)
+ * and when that fingerprint was first observed. Observing anything else — a
+ * different screen, `composer`, `none`, `unknown`, no session — forgets it, so
+ * the next observation of the same words is a new appearance with a new
+ * `firstSeenAt`, which the token binds (`./token`).
+ *
+ * What this cannot see: the screen going away and coming back between two
+ * observations, with nothing observed in between (observations are opt-in, not
+ * a poll). The two are one appearance here.
+ *
+ * In memory on `globalThis` (the route that issues and the route that verifies
+ * are bundled apart under `next dev`), bounded; forgetting an instance only
+ * makes its next observation a new appearance, which fails closed.
+ *
+ * @module lib/prompt-observation/appearance
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.approvalTargetWithOptionRowsAligned = approvalTargetWithOptionRowsAligned;
+exports.approvalTargetWithoutHighlight = approvalTargetWithoutHighlight;
+exports.screenFingerprint = screenFingerprint;
+exports.noteScreenAppearance = noteScreenAppearance;
+exports.forgetScreenAppearance = forgetScreenAppearance;
+const global_state_1 = require("../../lib/global-state");
+const dialog_block_1 = require("../../lib/detection/tools/dialog-block");
+/** How many instances are tracked at once; the least recently observed is forgotten first. */
+const MAX_TRACKED_INSTANCES = 1024;
+const appearances = (0, global_state_1.getOrInitGlobal)('__promptObservationScreenAppearances', () => new Map());
+/** Whitespace folded, so a re-render that only reflows a row is the same screen. */
+function normalize(text) {
+    return text === null ? null : text.replace(/\s+/g, ' ').trim();
+}
+/**
+ * How many rows under agy's bottom option row may be its wrapped tail: the
+ * allowance `detection/tools/antigravity/dialog.ts` gives the same block
+ * (`LAST_OPTION_TAIL_ROWS`, not exported). A tail longer than this reads as no
+ * block here, which leaves the target as it is (fail closed).
+ */
+const PERMISSION_OPTION_TAIL_ROWS = 12;
+/**
+ * The gutter of an option row: the highlight's glyph or the blank of the others.
+ * The glyphs are the block reader's (`dialog-block.ts`): agy's `>`, and claude's
+ * `❯`, codex's `›` and `●` for the readers that share the poller (#3817).
+ */
+const OPTION_ROW_GUTTER_PATTERN = /^[ \t]*[>\u276F\u203A\u25CF]?[ \t]*/u;
+/**
+ * The rows the shared block reader adopted as option rows, option 1 first, or
+ * null when they cannot be told.
+ *
+ * Taken from the reader itself, never re-judged here: `findNumberedOptionBlock`
+ * names the rows of option 1 (`firstRow`) and of the bottom option (`lastRow`)
+ * only, so option k's row is the `lastRow` of the block the reader finds above
+ * option k+1's row. Between two adopted rows there is no row the reader could
+ * parse as an option (it would have adopted it, or stopped there), so that
+ * block is the same run cut one option shorter. A row the reader folds into a
+ * label — `0. item`, `00. item` — is never in the list.
+ */
+function adoptedOptionRows(rows, block) {
+    const adopted = [block.lastRow];
+    for (let below = block.lastRow; adopted.length < block.options.length - 1;) {
+        const above = (0, dialog_block_1.findNumberedOptionBlock)(rows, below, rows.length);
+        if (above === null || above.firstRow !== block.firstRow || above.lastRow >= below)
+            return null;
+        adopted.unshift(above.lastRow);
+        below = above.lastRow;
+    }
+    adopted.unshift(block.firstRow);
+    return adopted.length === block.options.length ? adopted : null;
+}
+/**
+ * An approval target with the gutters of its option rows made the same, or null
+ * when its option rows cannot be told (Issue #3812, shared since #3817).
+ *
+ * The option block is found the way the readers find it
+ * (`findNumberedOptionBlock`, bottom up to `1.`), and taken only when each label
+ * the block reader read is `sameLabel` to the one the screen names. Only the
+ * gutter of the rows the reader adopted as options ({@link adoptedOptionRows})
+ * is made the same; every row above option 1 (the command, a here-document's
+ * `1. item`, its `>` and its indent) and every row folded into a label
+ * (`0. item` included) stays byte for byte.
+ *
+ * @param sameLabel - Whether the label the block reader read (rows under the
+ *   bottom option folded in) is the one the screen names
+ */
+function approvalTargetWithOptionRowsAligned(approvalTarget, options, sameLabel) {
+    const rows = approvalTarget.split('\n');
+    const block = (0, dialog_block_1.findNumberedOptionBlock)(rows, rows.length, PERMISSION_OPTION_TAIL_ROWS);
+    if (block === null)
+        return null;
+    // The reader folds the rows under the bottom option into its label.
+    const labels = [...block.options];
+    const last = labels.length - 1;
+    if (block.footer !== '')
+        labels[last] = [labels[last], ...block.footer.split('\n')].join(' ').trim();
+    if (labels.length !== options.length || labels.some((label, i) => !sameLabel(label, options[i])))
+        return null;
+    const adopted = adoptedOptionRows(rows, block);
+    if (adopted === null)
+        return null;
+    const optionRows = new Set(adopted);
+    return rows.map((row, i) => (optionRows.has(i) ? row.replace(OPTION_ROW_GUTTER_PATTERN, '  ') : row)).join('\n');
+}
+/**
+ * An approval target with the highlight's mark taken out (Issue #3812).
+ *
+ * agy's permission dialog reads its approval target down to the footer
+ * (`detection/tools/antigravity/dialog.ts`), so its option rows are the tail
+ * of the target and the `>` moves with every ↑/↓. Its option rows are aligned
+ * by {@link approvalTargetWithOptionRowsAligned} when the block's labels are
+ * exactly the screen's `options` — what the reader named.
+ *
+ * Any other kind, a target with no such block, or a block whose labels are not
+ * the screen's, is returned as is: a moved highlight then reads as another
+ * screen, which stops the strict respond rather than letting it through.
+ */
+function approvalTargetWithoutHighlight(kind, approvalTarget, options) {
+    if (approvalTarget === null || kind !== 'antigravity-permission')
+        return approvalTarget;
+    return approvalTargetWithOptionRowsAligned(approvalTarget, options, (read, named) => read === named) ?? approvalTarget;
+}
+/** One fixed form of what a screen asks. The highlight is not in it: moving the cursor is the same appearance. */
+function screenFingerprint(parts) {
+    return JSON.stringify([
+        parts.sessionName,
+        parts.sessionGeneration,
+        parts.kind,
+        normalize(parts.question),
+        parts.options.map(normalize),
+        normalize(approvalTargetWithoutHighlight(parts.kind, parts.approvalTarget, parts.options)),
+    ]);
+}
+function keyOf(instance) {
+    return JSON.stringify([instance.worktreeId, instance.cliToolId, instance.instanceId]);
+}
+/**
+ * Record an observation of a decision screen and return when this appearance
+ * of it was first observed.
+ *
+ * @param fingerprint - {@link screenFingerprint} of the screen
+ */
+function noteScreenAppearance(instance, fingerprint, now) {
+    const key = keyOf(instance);
+    const previous = appearances.get(key);
+    // Re-inserted, so the map's order is least recently observed first.
+    appearances.delete(key);
+    const firstSeenAt = previous?.fingerprint === fingerprint ? previous.firstSeenAt : Math.floor(now);
+    appearances.set(key, { fingerprint, firstSeenAt });
+    while (appearances.size > MAX_TRACKED_INSTANCES) {
+        const oldest = appearances.keys().next().value;
+        if (oldest === undefined)
+            break;
+        appearances.delete(oldest);
+    }
+    return firstSeenAt;
+}
+/** Record an observation of anything else: the instance's last screen has gone. */
+function forgetScreenAppearance(instance) {
+    appearances.delete(keyOf(instance));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commandmate",
-  "version": "0.47.0",
+  "version": "0.47.2",
   "description": "No long blocks of time? Run an AI team from your phone. Git worktree sessions, task contracts and verification gates for Claude Code, Codex, Gemini CLI, Copilot, OpenCode, Antigravity and Command Code.",
   "keywords": [
     "ai-agents",
@@ -99,7 +99,7 @@
     "jsdom": "^28.1.0",
     "lucide-react": "^0.554.0",
     "mermaid": "^11.12.2",
-    "next": "^15.5.25",
+    "next": "^15.5.28",
     "next-intl": "^4.8.2",
     "next-themes": "^0.4.6",
     "postcss": "^8.5.6",

package/release-notes/0.47.1.json

@@ -0,0 +1,20 @@
+{
+  "version": "0.47.1",
+  "date": "2026-10-23",
+  "highlight": {
+    "ja": "Auto-Yes が実行契約の制限を守らずに答えたり、危険なコマンドを見落としたりする問題を直しました。",
+    "en": "Fixed cases where Auto-Yes answered without honoring the execution contract's limits or missed a dangerous command."
+  },
+  "added": [],
+  "improved": [],
+  "fixed": [
+    {
+      "ja": "実行契約を一時的に読めなかったとき、Auto-Yes が契約の制限を無視して答えていた問題を直しました。読めない間は答えません。",
+      "en": "Fixed Auto-Yes answering without the contract's limits when the execution contract briefly could not be read. It now waits instead."
+    },
+    {
+      "ja": "承認を求めるコマンドの途中に「>」で始まる行があると、その上の危険なコマンドが拒否の判定から漏れていた問題を直しました。",
+      "en": "Fixed a dangerous command being missed by the deny check when the command awaiting approval contained a line starting with \">\"."
+    }
+  ]
+}

package/release-notes/0.47.2.json

@@ -0,0 +1,20 @@
+{
+  "version": "0.47.2",
+  "date": "2026-10-23",
+  "highlight": {
+    "ja": "依存パッケージの脆弱性を直しました。Next.js の重大な脆弱性への対応を含みます。",
+    "en": "Fixed vulnerabilities in dependencies, including a critical one in Next.js."
+  },
+  "added": [],
+  "improved": [],
+  "fixed": [
+    {
+      "ja": "Next.js を更新し、画像の最適化で外部からコードを実行されうる重大な脆弱性と、サービス停止の脆弱性を直しました。",
+      "en": "Updated Next.js to fix a critical vulnerability that could allow remote code execution through image optimization, and a denial-of-service issue."
+    },
+    {
+      "ja": "Markdown の表示に使うライブラリを更新し、高リスクの脆弱性を直しました。",
+      "en": "Updated libraries used to render Markdown to fix high-severity vulnerabilities."
+    }
+  ]
+}

package/scripts/hooks/cmate-agent-event.sh

@@ -71,6 +71,14 @@ json_string_field() {
     sed -n 's/.*"'"$2"'"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p'
 }
 
+# Extract a flat JSON non-negative integer field (digits only). A value that is
+# not a bare run of digits — a string, a negative or fractional number — yields
+# nothing. Text inside a string cannot produce the match: its quotes are escaped.
+json_integer_field() {
+  printf '%s' "$1" | tr -d '\n' |
+    sed -n 's/.*"'"$2"'"[[:space:]]*:[[:space:]]*\([0-9][0-9]*\)[[:space:]]*[,}].*/\1/p'
+}
+
 # Escape a value for embedding in a JSON string literal.
 json_escape() {
   printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g'
@@ -317,6 +325,20 @@ if [ "$EVENT" = "stop" ] && [ "$TOOL" = "claude" ] && [ -n "$HOOK_JSON" ]; then
       ;;
   esac
 fi
+# Issue #3820 (design docs/design/auto-yes-measurement-3820.md §2.4). agy's
+# `PostToolUse` names its call by `stepIdx` (unique within a conversation; the
+# conversation is the `sessionId` above), and the server ties it to the
+# `PreToolUse` of the same call — which reaches the permission route directly,
+# not through here — to tell when the call ended. Forwarded as a number on
+# antigravity's post_tool_use only, so every other tool and event keeps the
+# body it had; omitted when the payload has none (an older agy), which the
+# server reads as before. Bounded to 15 digits so it stays a safe integer.
+if [ "$EVENT" = "post_tool_use" ] && [ "$TOOL" = "antigravity" ] && [ -n "$HOOK_JSON" ]; then
+  STEP_IDX="$(json_integer_field "$HOOK_JSON" 'stepIdx')"
+  if [ -n "$STEP_IDX" ] && [ "${#STEP_IDX}" -le 15 ]; then
+    BODY="$BODY,\"stepIdx\":$STEP_IDX"
+  fi
+fi
 BODY="$BODY}"
 
 # Token via --header rather than the command line of a subprocess: argv is world