commandmate 0.49.0 → 0.49.2

package/dist/server/src/lib/verification/env-clean-gate.js

@@ -66,6 +66,7 @@ const session_name_1 = require("../../lib/cli-tools/session-name");
 const types_1 = require("../../lib/cli-tools/types");
 const env_snapshot_1 = require("./env-snapshot");
 const verify_config_1 = require("./verify-config");
+const session_kill_ledger_1 = require("./session-kill-ledger");
 // =============================================================================
 // Opt-in resolution
 // =============================================================================
@@ -538,6 +539,71 @@ function readDeadDemoVitestEntries(baseline) {
         return new Set();
     return new Set(recorded.filter((name) => typeof name === 'string' && demoVitestPid(name) !== null));
 }
+// =============================================================================
+// Sibling sessions stopped by someone else (Issue #3993)
+// =============================================================================
+/**
+ * Whether a CLI kill was asked for by someone known not to be this task's worker.
+ *
+ * Known means one of two facts the record carries:
+ *   - the caller's cwd is a sibling directory of the task's worktree — the
+ *     primary checkout the orchestrator runs from, or another worktree;
+ *   - the caller ran inside the tmux session of another worktree.
+ * Either is enough unless the other says "this task": a cwd inside the task's
+ * worktree, or the task's own session (or one of its worktree's), is the worker
+ * whatever else was recorded. A cwd that is nowhere in particular (`/tmp`,
+ * `$HOME`, `/`) with no session says nothing and is the worker — the strict
+ * answer, because only a kill *not* the worker's excuses.
+ *
+ * Only `cli` lines name a caller. The route's `browser` (judged from
+ * `Sec-Fetch-Site` alone, which a UI-driving worker sends and a header can
+ * forge) and `http` lines and the server's `server` cleanup (run after a
+ * `commandmate sync` a worker can issue) never excuse.
+ */
+function isKillByAnotherWorker(record, context, taskSession) {
+    if (record.origin !== 'cli')
+        return false;
+    const sessionOwner = record.callerSession === null
+        ? 'unattributed'
+        : taskSession && record.callerSession === taskSession
+            ? 'self'
+            : attributeSessionName(record.callerSession, context.worktreeId);
+    const cwdOwner = attributeAnchor(record.callerCwd, context.worktreePath);
+    if (sessionOwner === 'self' || cwdOwner === 'self')
+        return false;
+    return sessionOwner === 'other' || cwdOwner === 'other';
+}
+/**
+ * The recorded kill that explains a vanished `other` session, or undefined.
+ *
+ * Why this is the third line removals are excused on — the design note for
+ * #3993, which keeps #1624's rule rather than loosening it:
+ *
+ *   - #1624 is a worker killing a sibling's session. The two snapshots cannot
+ *     say who removed a session, so every same-repository removal was counted —
+ *     including the orchestrator's own cleanup (`instances <wt> kill`, the
+ *     first step of removing a worktree), which failed every parallel
+ *     verification on 2026-10-29.
+ *   - The session-kill ledger records each kill with the tmux sessions it
+ *     stopped and who asked. A removal is `external` only when a line inside
+ *     the task window names exactly that session and {@link isKillByAnotherWorker}
+ *     holds for it.
+ *   - Matched by the exact session name, never by worktree id: a worktree-wide
+ *     match let one cleanup line excuse a worker's unrecorded kill of another
+ *     instance of the same worktree hours earlier, and an id prefix
+ *     (`commandmate-skills` / `commandmate-skills-3944`) reached into another
+ *     worktree.
+ *   - Everything else stays a violation: a worker's own kill, a caller that is
+ *     nowhere in particular, the UI's and the server's kills, and any kill that
+ *     went around CommandMate (`tmux kill-session`), which records nothing.
+ */
+function findExternalKill(sessionName, kills, context, taskSession) {
+    return kills.find((record) => record.sessionNames.includes(sessionName) && isKillByAnotherWorker(record, context, taskSession));
+}
+/** A recorded kill of exactly this session that does not excuse it, for the report. */
+function findRecordedKill(sessionName, kills) {
+    return kills.find((record) => record.sessionNames.includes(sessionName));
+}
 function toChange(entry, owner) {
     return { key: entry.key, detail: entry.detail, owner };
 }
@@ -556,6 +622,7 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
     const deadDemoVitestEntries = readDeadDemoVitestEntries(baseline);
     const ignoredHomeEntries = new Set(options.ignoreHomeEntries ?? []);
     const resolvePidCwd = options.resolvePidCwd ?? exports.readLivePidCwd;
+    const sessionKills = (options.sessionKills ?? []).filter((record) => record.at >= baseline.capturedAt && record.at <= final.capturedAt);
     const probes = env_snapshot_1.ENV_PROBE_IDS.map((probeId) => {
         const before = baseline.probes[probeId];
         const after = final.probes[probeId];
@@ -570,6 +637,8 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
                 removed: [],
                 removedByOtherServer: [],
                 removedByOtherRepository: [],
+                removedExternal: [],
+                removedKillNotExcused: [],
                 removedStaleDemoVitest: [],
                 ignoredByConfig: [],
                 ignoredBuiltIn: [],
@@ -586,6 +655,8 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
                 removed: [],
                 removedByOtherServer: [],
                 removedByOtherRepository: [],
+                removedExternal: [],
+                removedKillNotExcused: [],
                 removedStaleDemoVitest: [],
                 ignoredByConfig: [],
                 ignoredBuiltIn: [],
@@ -631,6 +702,8 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
         const removed = [];
         const removedByOtherServer = [];
         const removedByOtherRepository = [];
+        const removedExternal = [];
+        const removedKillNotExcused = [];
         const removedStaleDemoVitest = [];
         for (const entry of before.entries) {
             if (afterKeys.has(entry.key))
@@ -652,6 +725,18 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
                 otherRepositorySessions.has(entry.key)) {
                 removedByOtherRepository.push(change);
             }
+            else if (probeId === 'tmux-sessions' && tmuxServerSurvived && change.owner === 'other') {
+                const killedBy = findExternalKill(entry.key, sessionKills, context, taskSession);
+                if (killedBy) {
+                    removedExternal.push({ ...change, killedBy });
+                }
+                else {
+                    removed.push(change);
+                    const recorded = findRecordedKill(entry.key, sessionKills);
+                    if (recorded)
+                        removedKillNotExcused.push({ ...change, killedBy: recorded });
+                }
+            }
             else if (probeId === 'home-entries' && deadDemoVitestEntries.has(entry.key)) {
                 removedStaleDemoVitest.push(change);
             }
@@ -669,6 +754,8 @@ function diffEnvSnapshots(baseline, final, context, options = {}) {
             removed,
             removedByOtherServer,
             removedByOtherRepository,
+            removedExternal,
+            removedKillNotExcused,
             removedStaleDemoVitest,
             ignoredByConfig,
             ignoredBuiltIn,
@@ -736,6 +823,35 @@ function formatRemovedByOtherServer(changes) {
 function formatRemovedByOtherRepository(changes) {
     return changes.map((change) => `    · - ${change.key} (ignored: a worktree of another repository on this server, recorded at task start)`);
 }
+/** Sibling sessions stopped by someone else's recorded kill (#3993), one line each. */
+function formatRemovedExternal(changes) {
+    return changes.map(({ key, killedBy }) => `    · - ${key} [external] (not counted: ${describeKill(killedBy)}, not this task)`);
+}
+/** `<api> for <worktree>[ instance <id>] at <ISO> from <caller>` of one recorded kill. */
+function describeKill(killedBy) {
+    const target = killedBy.instanceId
+        ? `${killedBy.worktreeId} instance ${killedBy.instanceId}`
+        : killedBy.worktreeId;
+    const caller = killedBy.origin === 'browser'
+        ? 'the UI'
+        : killedBy.origin === 'server'
+            ? 'the server'
+            : killedBy.origin === 'http'
+                ? 'an HTTP request with no caller'
+                : killedBy.callerSession
+                    ? `${killedBy.callerCwd ?? 'an unknown cwd'} in ${killedBy.callerSession}`
+                    : (killedBy.callerCwd ?? 'an unknown cwd');
+    return `${killedBy.api} for ${target} at ${new Date(killedBy.at).toISOString()} from ${caller}`;
+}
+/** Counted removals whose kill was recorded but does not excuse them (#3993), one line each. */
+function formatRemovedKillNotExcused(changes) {
+    return changes.map(({ key, killedBy }) => {
+        const why = killedBy.origin === 'browser' || killedBy.origin === 'server'
+            ? `a ${killedBy.origin} kill a worker can also cause`
+            : 'the caller is not known to be someone else';
+        return `    · ${key}: kill recorded but counted (${describeKill(killedBy)}; not excused: ${why})`;
+    });
+}
 /** Removals excused as leftover demo-vitest directories (#3043), one line each. */
 function formatRemovedStaleDemoVitest(changes) {
     return changes.map((change) => `    · - ${change.key} (ignored: its pid was already dead at task start — a leftover swept by the demo-video tests)`);
@@ -788,6 +904,7 @@ function formatEnvCleanReport(diff) {
             lines.push(...formatTaskSessionChanges(probe.taskSessionAdded));
             lines.push(...formatRemovedByOtherServer(probe.removedByOtherServer));
             lines.push(...formatRemovedByOtherRepository(probe.removedByOtherRepository));
+            lines.push(...formatRemovedExternal(probe.removedExternal));
             lines.push(...formatRemovedStaleDemoVitest(probe.removedStaleDemoVitest));
             lines.push(...formatIgnoredByConfig(probe.ignoredByConfig));
             lines.push(...formatIgnoredBuiltIn(probe.ignoredBuiltIn));
@@ -797,9 +914,11 @@ function formatEnvCleanReport(diff) {
         lines.push(`  ${probe.probeId} VIOLATED (${label}): +${probe.added.length} -${probe.removed.length}`);
         lines.push(...formatChanges('+', probe.added));
         lines.push(...formatChanges('-', probe.removed));
+        lines.push(...formatRemovedKillNotExcused(probe.removedKillNotExcused));
         lines.push(...formatTaskSessionChanges(probe.taskSessionAdded));
         lines.push(...formatRemovedByOtherServer(probe.removedByOtherServer));
         lines.push(...formatRemovedByOtherRepository(probe.removedByOtherRepository));
+        lines.push(...formatRemovedExternal(probe.removedExternal));
         lines.push(...formatRemovedStaleDemoVitest(probe.removedStaleDemoVitest));
         lines.push(...formatIgnoredByConfig(probe.ignoredByConfig));
         lines.push(...formatIgnoredBuiltIn(probe.ignoredBuiltIn));
@@ -862,9 +981,19 @@ async function evaluateEnvClean(input) {
         return done('error', `${verify_config_1.ENV_CLEAN_GATE_ID}: UNKNOWN — the current snapshot could not be taken: ` +
             `${error instanceof Error ? error.message : String(error)}`, null);
     }
+    const readSessionKills = input.readSessionKills ?? ((since, until) => (0, session_kill_ledger_1.readSessionKillRecords)(since, until));
+    let sessionKills;
+    try {
+        sessionKills = readSessionKills(input.baseline.capturedAt, final.capturedAt);
+    }
+    catch {
+        // An unreadable ledger excuses nothing; it is not a reason to withhold a verdict.
+        sessionKills = [];
+    }
     const diff = diffEnvSnapshots(input.baseline, final, input, {
         ignoreHomeEntries: input.ignoreHomeEntries,
         resolvePidCwd: input.resolvePidCwd,
+        sessionKills,
     });
     const header = `${verify_config_1.ENV_CLEAN_GATE_ID}: baseline=${new Date(input.baseline.capturedAt).toISOString()} ` +
         `status=${diff.status} task-session=${describeTaskSession(diff.taskSession)}`;

package/dist/server/src/lib/verification/env-snapshot.js

@@ -40,6 +40,7 @@ const path_1 = require("path");
 const env_1 = require("../../lib/env");
 const logger_1 = require("../../lib/logger");
 const machine_lock_1 = require("./machine-lock");
+const session_kill_ledger_1 = require("./session-kill-ledger");
 const worktree_index_1 = require("./worktree-index");
 const logger = (0, logger_1.createLogger)('lib/verification/env-snapshot');
 /** Bumped only when a stored snapshot stops being readable by this module. */
@@ -329,6 +330,8 @@ exports.MCBD_SESSION_PREFIX = 'mcbd-';
  * is none of a delegation's business, so watching them would only manufacture
  * violations. Sessions of *other* worktrees stay in the set on purpose — killing
  * a sibling worker's session is the #1624 failure this probe is here to catch.
+ * A sibling session stopped by someone else through `instances <wt> kill` is set
+ * apart at diff time from the session-kill ledger (Issue #3993), not here.
  *
  * "No server running" is an answer (zero sessions), which is why it is not
  * treated as a probe failure. `tmux` being absent, or hanging, is not.
@@ -370,14 +373,20 @@ exports.ENV_SNAPSHOT_DIR_NAME = 'env-snapshots';
  * `~/.commandmate` (Issue #1771): the gate mutex locks and the worktree index
  * registry. Neither is a side effect of the delegation — the first mutexed gate
  * on a machine creates them — so counting them would report the runner's own
- * bookkeeping as pollution the agent left behind.
+ * bookkeeping as pollution the agent left behind. The session-kill ledger
+ * (Issue #3993) is the same kind of bookkeeping: the first recorded
+ * `instances <wt> kill` on a machine creates it.
  *
  * Scoped to the `~/.commandmate` probe rather than added to
  * {@link isIgnoredEntry}: a `~/locks` directory in `$HOME` is not ours, and
  * blanket-ignoring the name would put a hole in the probe that exists to catch
  * exactly that.
  */
-const COMMANDMATE_RUNTIME_ENTRY_NAMES = [machine_lock_1.MACHINE_LOCK_DIR_NAME, worktree_index_1.WORKTREE_INDEX_DIR_NAME];
+const COMMANDMATE_RUNTIME_ENTRY_NAMES = [
+    machine_lock_1.MACHINE_LOCK_DIR_NAME,
+    worktree_index_1.WORKTREE_INDEX_DIR_NAME,
+    session_kill_ledger_1.SESSION_KILL_LEDGER_DIR_NAME,
+];
 function isIgnoredEntry(name) {
     if (name === exports.ENV_SNAPSHOT_DIR_NAME)
         return true;

package/dist/server/src/lib/verification/session-kill-ledger.js

@@ -0,0 +1,174 @@
+"use strict";
+/**
+ * Record of `mcbd-*` sessions stopped through CommandMate's kill (Issue #3993).
+ *
+ * The `env-clean` gate counts every vanished session of a sibling worktree as a
+ * violation, because a worker killing its neighbour is the #1624 failure. The
+ * orchestrator stops sibling sessions too — `commandmate instances <wt> kill`
+ * when it cleans a worktree up (worktree-cleanup Phase 3), the UI's kill
+ * button, the server's cleanup after sync or a repository removal — and the two
+ * snapshots cannot tell that apart from a worker's kill: on 2026-10-29 four
+ * verification runs of #3957 failed on `- mcbd-…-<another worktree> [other]`
+ * for a cleanup nobody in the worker's transcript had run.
+ *
+ * This ledger is the missing fact: one line per kill, naming the API, the
+ * tmux sessions it actually stopped, the worktree it was for and who asked
+ * (the caller's working directory and tmux session). The gate excuses as little
+ * as it can prove is not the worker's (`env-clean-gate.ts`, `findExternalKill`):
+ * a vanished sibling session is `external` only when a line inside the task's
+ * window names that exact session, was written by the CLI, and its caller is
+ * known to be someone else — a cwd in a sibling directory of the task's
+ * worktree (the primary checkout, another worktree) or a tmux session of
+ * another worktree. Everything else stays a violation, exactly as before:
+ * a worker's own kill, a caller that is nowhere in particular (`/tmp`, `$HOME`),
+ * the route's and the server's lines (a worker can reach the UI and trigger
+ * sync too), and any kill that bypassed CommandMate (`tmux kill-session`), which
+ * records nothing. Those lines are still shown next to the violation.
+ *
+ * Written by the CLI (with its caller), by the kill-session route and by
+ * `session-cleanup.ts`. A CLI kill is therefore recorded twice — the CLI's line
+ * and the route's `http` line — which changes no verdict: only the CLI's line
+ * can excuse anything.
+ *
+ * Machine-wide, like the gate mutex (`machine-lock.ts`): the CLI and the server
+ * write it and the server's gate reads it, so the path is derived from `$HOME` alone —
+ * `~/.commandmate/session-kills/<UTC date>.jsonl` — with an override for tests.
+ * The `commandmate-entries` probe ignores the directory, like `locks`.
+ *
+ * Node built-ins only: the CLI imports this module.
+ *
+ * @module lib/verification/session-kill-ledger
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_KILL_LEDGER_RETENTION_MS = exports.SESSION_KILL_LEDGER_VERSION = exports.SESSION_KILL_LEDGER_ROOT_ENV = exports.SESSION_KILL_LEDGER_DIR_NAME = void 0;
+exports.defaultSessionKillLedgerRoot = defaultSessionKillLedgerRoot;
+exports.resolveSessionKillLedgerRoot = resolveSessionKillLedgerRoot;
+exports.appendSessionKillRecord = appendSessionKillRecord;
+exports.isSessionKillRecord = isSessionKillRecord;
+exports.readSessionKillRecords = readSessionKillRecords;
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+/** Directory under `~/.commandmate`; exported for the `commandmate-entries` probe. */
+exports.SESSION_KILL_LEDGER_DIR_NAME = 'session-kills';
+/** Overrides the ledger directory (tests, isolated environments). */
+exports.SESSION_KILL_LEDGER_ROOT_ENV = 'CM_SESSION_KILL_LEDGER_ROOT';
+/** Bumped only when a line stops being readable by this module. */
+exports.SESSION_KILL_LEDGER_VERSION = 1;
+/** Day files older than this are removed when a new line is written (same as env snapshots). */
+exports.SESSION_KILL_LEDGER_RETENTION_MS = 30 * 24 * 60 * 60 * 1000;
+const DAY_MS = 24 * 60 * 60 * 1000;
+const DAY_FILE_PATTERN = /^(\d{4}-\d{2}-\d{2})\.jsonl$/;
+const SESSION_KILL_APIS = ['kill-session', 'session-cleanup'];
+const SESSION_KILL_ORIGINS = ['cli', 'browser', 'http', 'server'];
+function defaultSessionKillLedgerRoot() {
+    return (0, path_1.join)((0, os_1.homedir)(), '.commandmate', exports.SESSION_KILL_LEDGER_DIR_NAME);
+}
+function resolveSessionKillLedgerRoot(env = process.env) {
+    const override = env[exports.SESSION_KILL_LEDGER_ROOT_ENV];
+    return override && override.trim() !== '' ? override : defaultSessionKillLedgerRoot();
+}
+function dayOf(epochMs) {
+    return new Date(epochMs).toISOString().slice(0, 10);
+}
+function pruneOldDays(root, now) {
+    const oldest = dayOf(now - exports.SESSION_KILL_LEDGER_RETENTION_MS);
+    let names;
+    try {
+        names = (0, fs_1.readdirSync)(root);
+    }
+    catch {
+        return;
+    }
+    for (const name of names) {
+        const day = DAY_FILE_PATTERN.exec(name)?.[1];
+        if (day === undefined || day >= oldest)
+            continue;
+        try {
+            (0, fs_1.rmSync)((0, path_1.join)(root, name), { force: true });
+        }
+        catch {
+            // A day file that cannot be removed is disk use, not a reason to fail a kill.
+        }
+    }
+}
+/**
+ * Append one kill. Never throws: the kill already happened, and failing the
+ * command over its bookkeeping would only hide that.
+ *
+ * @returns true when the line was written
+ */
+function appendSessionKillRecord(record, root = resolveSessionKillLedgerRoot()) {
+    try {
+        (0, fs_1.mkdirSync)(root, { recursive: true, mode: 0o700 });
+        // One short line per append; O_APPEND keeps concurrent writers' lines whole.
+        (0, fs_1.appendFileSync)((0, path_1.join)(root, `${dayOf(record.at)}.jsonl`), `${JSON.stringify(record)}\n`, {
+            encoding: 'utf8',
+            mode: 0o600,
+        });
+        pruneOldDays(root, record.at);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isNullableString(value) {
+    return value === null || typeof value === 'string';
+}
+/** Whether a parsed line is a record this module can use; anything else is skipped. */
+function isSessionKillRecord(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const record = value;
+    return (record.version === exports.SESSION_KILL_LEDGER_VERSION &&
+        typeof record.at === 'number' &&
+        typeof record.api === 'string' &&
+        SESSION_KILL_APIS.includes(record.api) &&
+        typeof record.origin === 'string' &&
+        SESSION_KILL_ORIGINS.includes(record.origin) &&
+        typeof record.worktreeId === 'string' &&
+        record.worktreeId !== '' &&
+        isNullableString(record.instanceId) &&
+        Array.isArray(record.sessionNames) &&
+        record.sessionNames.every((name) => typeof name === 'string') &&
+        isNullableString(record.callerCwd) &&
+        isNullableString(record.callerSession));
+}
+/**
+ * The kills recorded in `[since, until]` (epoch ms, inclusive).
+ *
+ * A missing directory, an unreadable day file and a malformed line all read as
+ * "no record", which only ever excuses less.
+ */
+function readSessionKillRecords(since, until, root = resolveSessionKillLedgerRoot()) {
+    if (!(since <= until))
+        return [];
+    // Nothing older than the retention survives, so a stale baseline costs no extra reads.
+    since = Math.max(since, until - exports.SESSION_KILL_LEDGER_RETENTION_MS - DAY_MS);
+    const records = [];
+    for (let day = Date.parse(`${dayOf(since)}T00:00:00.000Z`); day <= until; day += DAY_MS) {
+        let text;
+        try {
+            text = (0, fs_1.readFileSync)((0, path_1.join)(root, `${dayOf(day)}.jsonl`), 'utf8');
+        }
+        catch {
+            continue;
+        }
+        for (const line of text.split('\n')) {
+            if (line.trim() === '')
+                continue;
+            let parsed;
+            try {
+                parsed = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            if (isSessionKillRecord(parsed) && parsed.at >= since && parsed.at <= until) {
+                records.push(parsed);
+            }
+        }
+    }
+    return records;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commandmate",
-  "version": "0.49.0",
+  "version": "0.49.2",
   "description": "No long blocks of time? Run an AI team from your phone. Git worktree sessions, task contracts and verification gates for Claude Code, Codex, Gemini CLI, Copilot, OpenCode, Antigravity and Command Code.",
   "keywords": [
     "ai-agents",
@@ -113,8 +113,10 @@
     "rehype-sanitize": "^6.0.0",
     "rehype-slug": "^6.0.0",
     "remark-gfm": "^4.0.1",
+    "remark-parse": "^11.0.0",
     "safe-regex2": "^5.0.0",
     "tailwind-merge": "^3.6.0",
+    "unified": "^11.0.5",
     "uuid": "^13.0.0",
     "web-push": "^3.6.7",
     "ws": "^8.18.3",
@@ -131,7 +133,9 @@
     "@testing-library/react": "^16.3.2",
     "@types/better-sqlite3": "^7.6.13",
     "@types/eslint": "^8.56.12",
+    "@types/hast": "^3.0.4",
     "@types/http-proxy": "^1.17.17",
+    "@types/mdast": "^4.0.4",
     "@types/node": "20.19.35",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",

package/release-notes/0.49.1.json

@@ -0,0 +1,66 @@
+{
+  "version": "0.49.1",
+  "date": "2026-10-30",
+  "highlight": {
+    "ja": "同じエージェントへの送信を 1 本ずつに調停し、別の依頼の返答が届く取り違えを防ぐようにしました。Command Code の計画レビューもスマホやターミナル表示から承認できます。",
+    "en": "Messages to the same agent are now sent one at a time, so a reply meant for another request is no longer delivered by mistake. Command Code plan reviews can now be approved from the phone and terminal views."
+  },
+  "added": [
+    {
+      "ja": "サイドバーの「Needs attention」やブランチ行から開くと、応答を待っているエージェントが選ばれた状態で開くようになりました。",
+      "en": "Opening a worktree from Needs attention or a branch row in the sidebar now selects the agent that is waiting for you."
+    },
+    {
+      "ja": "データベースの更新が必要なときは、更新の前にデータベースの複製を自動で保存するようになりました。",
+      "en": "Before the database is upgraded, a copy of it is now saved automatically."
+    }
+  ],
+  "improved": [
+    {
+      "ja": "Claude の /restart をスラッシュコマンドの一覧に追加しました。",
+      "en": "Added Claude's /restart to the slash command list."
+    }
+  ],
+  "fixed": [
+    {
+      "ja": "Command Code の計画レビューで、承認・取り消し・コメントのボタンが画面外に隠れて押せない問題を直しました。",
+      "en": "Fixed the approve, cancel and comment buttons of a Command Code plan review being cut off and unreachable."
+    },
+    {
+      "ja": "Command Code のターミナル表示が真っ黒に見えることがある問題を直しました。",
+      "en": "Fixed the Command Code terminal view sometimes appearing completely blank."
+    },
+    {
+      "ja": "同じエージェントへ続けて送った依頼で、別の依頼の返答が届くことがある問題を直しました。",
+      "en": "Fixed a reply to a different request sometimes being delivered when several requests were sent to the same agent."
+    },
+    {
+      "ja": "同じエージェントへの送信が重なったとき、入力欄に文字が残ったり混ざったりする問題を直しました。",
+      "en": "Fixed leftover or mixed-up text in the input box when several messages to the same agent overlapped."
+    },
+    {
+      "ja": "返信を待つ送信（--reply-to など）に失敗したとき、もう一度送ってよいか、先に画面を確かめるべきかを CLI が案内するようになりました。",
+      "en": "When a send that waits for a reply (such as --reply-to) fails, the CLI now tells you whether it is safe to send again or whether to check the screen first."
+    },
+    {
+      "ja": "wait が指定した時間を過ぎても終わらないことがある問題を直しました。",
+      "en": "Fixed wait sometimes running past its timeout."
+    },
+    {
+      "ja": "前の作業の完了を、今回の送信の完了と取り違えることがある問題を直しました。",
+      "en": "Fixed the end of an earlier turn sometimes being mistaken for the end of the current one."
+    },
+    {
+      "ja": "返答の中で引用したエラーの文字を、本物の障害と誤って判定する問題を直しました。",
+      "en": "Fixed quoted error text in a reply being mistaken for a real upstream error."
+    },
+    {
+      "ja": "入力欄のクリアに失敗したとき、その理由が画面に表示されるようになりました。",
+      "en": "When clearing the input box fails, the reason is now shown on screen."
+    },
+    {
+      "ja": "respond で、回答が届かなかったのか途中で止まったのかを分けて表示するようになりました。",
+      "en": "respond now tells apart an answer that never arrived from one that stopped partway."
+    }
+  ]
+}

package/release-notes/0.49.2.json

@@ -0,0 +1,49 @@
+{
+  "version": "0.49.2",
+  "date": "2026-10-31",
+  "highlight": {
+    "ja": "起動したばかりの Claude への最初のメッセージが、届いていないのに「送信済み」と表示される問題を直しました。送信や回答が失敗したときも、キーが届いたか・送り直してよいかを正しく伝えるようにしました。",
+    "en": "Fixed the first message to a just-started Claude being reported as sent when it never arrived. When a send or an answer fails, you are now told whether the keys reached the agent and whether it is safe to send again."
+  },
+  "added": [],
+  "improved": [
+    {
+      "ja": "Review の承認一覧やリポジトリの帯・パンくずから開いたときも、応答を待っているエージェントが選ばれた状態で開くようになりました。",
+      "en": "Opening a worktree from the Review approval list, the repository strip or the breadcrumb now also selects the agent that is waiting for you."
+    },
+    {
+      "ja": "CLI の wait・ask・verify の --timeout が、サーバーが応答しないときも含めてコマンド全体の期限として効くようになりました。",
+      "en": "The --timeout of wait, ask and verify in the CLI now limits the whole command, including when the server does not respond."
+    },
+    {
+      "ja": "CLI の respond などが出す次の操作の案内に、対象のエージェントの指定が含まれるようになりました。",
+      "en": "The follow-up hints printed by respond and other CLI commands now include the agent they refer to."
+    }
+  ],
+  "fixed": [
+    {
+      "ja": "起動したばかりの Claude への最初のメッセージが届かず、次の送信が失敗することがある問題を直しました。",
+      "en": "Fixed the first message to a just-started Claude sometimes not arriving and making the next send fail."
+    },
+    {
+      "ja": "同じエージェントを同時に起動しようとしたとき、起動が重なって入力が混ざることがある問題を直しました。",
+      "en": "Fixed overlapping launches of the same agent sometimes mixing up typed input."
+    },
+    {
+      "ja": "回答の途中で止まったとき、一部のキーが届いた可能性があることを知らせるようにしました（スマホと PC の両方）。",
+      "en": "When an answer stops partway, you are now told that some keys may have reached the agent, on both phone and desktop."
+    },
+    {
+      "ja": "スマホで開き直すと、選んでいたエージェントが先頭のエージェントに戻ってしまう問題を直しました。",
+      "en": "Fixed the selected agent switching back to the first one when a worktree was reopened on the phone."
+    },
+    {
+      "ja": "送信が失敗したとき、送り直してよいかが CLI に伝わらないことがある問題を直しました。",
+      "en": "Fixed the CLI sometimes not being told whether a failed send is safe to retry."
+    },
+    {
+      "ja": "古い場所のデータベースを移すとき、書き込み途中の更新が失われることがある問題を直しました。",
+      "en": "Fixed recent changes sometimes being lost when a database was moved from its old location."
+    }
+  ]
+}

package/.next/server/chunks/1210.js

@@ -1 +0,0 @@
-"use strict";exports.id=1210,exports.ids=[1210],exports.modules={71210:(a,b,c)=>{c.d(b,{notifyRelayPromptWaiting:()=>L,notifyRelayTurnCompleted:()=>K,runRelayMaintenanceTick:()=>O});var d=c(88807),e=c(64049),f=c(52660),g=c(81254),h=c(55233),i=c(39687),j=c(640),k=c(23854),l=c(8360),m=c(40964),n=c(34331),o=c(31990),p=c(95595),q=c(64501),r=c(34405),s=c(72626);let t=(0,s.h)("relay-readiness");async function u(a,b,c,d){try{let e=(0,m.mf)(b,a,c),f=await (0,n.L)(a,e,d);if(null===f||"foreign"===f.verdict)return"foreign_session";if("absent"===f.verdict)return"session_stopped";let g=l.CLIToolManager.getInstance().getTool(b);if(!await g.isRunning(a,c))return"session_stopped";let h=await (0,o.Wh)(a,b,r._,c);if((0,q.NV)(a,b,c,h))return"generating";let i=(0,p.WC)(h,b);return"running"===i.status?"generating":null}catch(d){return t.warn("relay-readiness-check-failed",{worktreeId:a,cliToolId:b,instanceId:c,error:d instanceof Error?d.message:String(d)}),null}}var v=c(49798),w=c(67164),x=c(85016),y=c(25539),z=c(36925);let A=(0,s.h)("relay-delivery"),B=/-turn:/,C=[f.RELAY_SYSTEM_REQUEST_ID_PREFIX,f.MODEL_CHANGE_REQUEST_ID_PREFIX],D={claude:!0,codex:!0,antigravity:!0,"command-code":!0,opencode:!0,copilot:!1,gemini:!1,"vibe-local":!1,"opencode-v2":!0},E=(0,z.v)("__relayDeliveryInFlight",()=>new Set);function F(a,b){let c=(0,v.S)(a,b.to);return{alias:c.alias,worktreeId:c.worktreeId}}function G(a,b,c){let d=(0,f.getMessages)(a,b.worktreeId,{limit:40,cliToolId:b.cliToolId,instanceId:b.instanceId,matchResolvedInstance:!0}),e=!0===D[b.cliToolId];for(let a of d){var g;if(!("assistant"!==a.role||"prompt"===a.messageType||function(a){return"string"==typeof a&&C.some(b=>a.startsWith(b))}(a.requestId))){if((!e||"string"==typeof(g=a.requestId)&&B.test(g))&&""!==a.content.trim())return a.timestamp.getTime()<c?null:a}}return null}function H(a,b,c){let d=(0,e.ix)(a,{worktreeId:b.worktreeId,instanceId:b.instanceId});if(0===d.length)return 0;let f=0;for(let g of d){let d=G(a,b,g.createdAt);if(!d)continue;let h=(0,j.z0)(F(a,g),d.content);(0,e.be)(a,g.id,"reply",h,c)&&(f+=1)}return f}function I(a){return new Promise(b=>{setTimeout(b,a)})}async function J(a,b){let c=Date.now()+15e3;for(;;){if(H(a,b,Date.now())>0)return void N();if(Date.now()>=c)break;await I(1e3)}A.info("relay-scrape-row-not-transcript-backed",{worktreeId:b.worktreeId,cliToolId:b.cliToolId,instanceId:b.instanceId,graceMs:15e3})}async function K(a,b){try{var c;let f=(0,d.getDbInstance)(),g=(0,e.ix)(f,{worktreeId:a.worktreeId,instanceId:a.instanceId});if(0===g.length)return;if(b.settled){H(f,a,Date.now())>0&&N();return}if(c=a.cliToolId,!0===D[c])return void await J(f,a);let h=null;for(let b=0;b<3;b+=1){let b=G(f,a,0);h=b?.id??null,await I(k.DZ);let c=G(f,a,0);if((c?.id??null)===h){H(f,a,Date.now())>0&&N();return}}A.info("relay-scrape-never-settled",{worktreeId:a.worktreeId,instanceId:a.instanceId,attempts:3})}catch(b){A.warn("relay-turn-completed-failed",{worktreeId:a.worktreeId,instanceId:a.instanceId,error:b instanceof Error?b.message:String(b)})}}function L(a){try{let b=(0,d.getDbInstance)(),c=(0,e.ix)(b,{worktreeId:a.worktreeId,instanceId:a.instanceId});if(0===c.length)return;let i=(0,f.getLatestOpenPromptMessage)(b,a.worktreeId,a.cliToolId,a.instanceId);if(!i)return;let k=(0,h.dV)(b),l=function(a){let b=a.promptData;return(0,g.XF)(b)?"yes_no"===b.type?b.options.map(a=>({key:a,label:a})):b.options.map(a=>({key:String(a.number),label:a.label})):[]}(i),m=(0,g.XF)(i.promptData)?i.promptData.question:i.promptData?.question??i.content,n=0;for(let a of c){if((0,e.GC)(b,a.id)===i.id)continue;let c=(0,j.Hr)(k,F(b,a),{question:m,options:l});(0,e.be)(b,a.id,"prompt",c)&&((0,e.UC)(b,a.id,i.id),n+=1)}n>0&&N()}catch(b){A.warn("relay-prompt-notify-failed",{worktreeId:a.worktreeId,instanceId:a.instanceId,error:b instanceof Error?b.message:String(b)})}}async function M(a,b,c,d){var g,h;let j=(0,e.Ip)(a,b);if(!j)return"skipped";let k=(0,v.S)(a,j.from),l=await u(k.worktreeId,k.cliToolId,k.instanceId,a);if(l)return A.debug("relay-delivery-held",{relayId:b,kind:c,reason:l}),"held";let m=(g=a,h=b,(0,e.uG)(g).find(a=>a.relay.id===h)??null);if(!m||m.kind!==c||m.body!==d)return A.info("relay-delivery-superseded",{relayId:b,kind:c}),"skipped";if("expired"!==c&&!(0,y.Lo)(m.relay.state))return A.info("relay-delivery-closed",{relayId:b,kind:c,state:m.relay.state}),"skipped";let n=m.relay,o=(0,v.S)(a,n.from);(0,x.o5)(b);try{let g=await (0,i.d)(a,{worktreeId:o.worktreeId,content:d,cliToolId:o.cliToolId,instanceId:o.instanceId,messageType:"relay",requestId:"reply"===c?(0,f.relayRequestId)(n.id):void 0});if(!g.ok)return A.info("relay-delivery-refused",{relayId:b,kind:c,stage:g.stage}),"prompt_waiting"===g.stage?"held":"failed";let h=Date.now();return"reply"===c?((0,e.Bf)(a,n.id,(0,f.relayRequestId)(n.id),h)||A.info("relay-already-closed-on-deliver",{relayId:b}),(0,w._)(a,n.id,"replied",o,(0,v.S)(a,n.to),h)):"prompt"===c&&(0,w._)(a,n.id,"waiting",o,(0,v.S)(a,n.to),h),(0,e.uJ)(a,n.id,h),A.info("relay-delivered",{relayId:b,kind:c,to:`${o.worktreeId}/${o.instanceId}`}),"delivered"}finally{(0,x.dJ)(b)}}async function N(){if(!globalThis.__relayPumpRunning){globalThis.__relayPumpRunning=!0;try{let a=(0,d.getDbInstance)();for(let b of(0,e.uG)(a))if(!E.has(b.relay.id)){E.add(b.relay.id);try{await M(a,b.relay.id,b.kind,b.body)}catch(a){A.warn("relay-delivery-failed",{relayId:b.relay.id,error:a instanceof Error?a.message:String(a)})}finally{E.delete(b.relay.id)}}}catch(a){A.warn("relay-pump-failed",{error:a instanceof Error?a.message:String(a)})}finally{globalThis.__relayPumpRunning=!1}}}async function O(){try{!function(a,b=Date.now()){for(let c of(0,e.s7)(a,b))if(!(0,x.p5)(c.id))try{let d=(0,h.dV)(a);(0,e.uJ)(a,c.id,b);let f=(0,j.KA)(d,F(a,c),c.expiresAt-c.createdAt),g=(0,e.be)(a,c.id,"expired",f,b);if(!(0,e.Cz)(a,c.id,b)){g&&(0,e.uJ)(a,c.id,b);continue}(0,w._)(a,c.id,"expired",(0,v.S)(a,c.from),(0,v.S)(a,c.to),b)}catch(a){A.warn("relay-expire-failed",{relayId:c.id,error:a instanceof Error?a.message:String(a)})}}((0,d.getDbInstance)())}catch(a){A.warn("relay-sweep-failed",{error:a instanceof Error?a.message:String(a)})}await N()}}};