feat: add cursor-based editing to text inputs - #3698

* feat: add cursor-based editing to text inputs

refs herdrdev#1803

* fix: preserve dialog actions with associated text

refs herdrdev#1803

* refactor: simplify text editor outcomes and tests

refs herdrdev#1803

---------

Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: disconnect stalled terminal observers (herdrdev#4039)

* fix: order ui accent before nested config tables (herdrdev#2698)

* fix: order ui accent before nested config tables

refs herdrdev#2697

* test: reject duplicate ui accent examples

refs herdrdev#2697

---------

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>

* fix: decouple pixel mouse from pane graphics (herdrdev#4045)

refs herdrdev#3295

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: restrict claude session hooks to native sources (herdrdev#4046)

refs herdrdev#4018

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix(input): preserve super-modified pane keys (herdrdev#4044)

refs herdrdev#3710

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* test: relax windows docs snapshot timeout (herdrdev#4049)

Windows CI runs these documentation contract fixtures under variable load. A degraded runner pushed the preview and versions snapshot integration tests past their 30s ceiling, while a healthy run finishes in seconds. Keep 30s elsewhere and give Windows a 120s ceiling.

* fix: retain validated split mouse reports across idle gaps (herdrdev#4048)

refs herdrdev#3911

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix(server): transfer handoff descriptors in batches (herdrdev#3411)

Live handoff refused any session with more than 64 panes. The pane count
was checked twice against MAX_FDS_PER_HANDOFF, and the transfer itself put
every pane's pty master into one SCM_RIGHTS control message, so the guard
was the only thing keeping the send inside the kernel's per-message limit.
A session past the limit could only be updated by closing panes or by a
normal restart, which ends every pane process.

Send the descriptors in batches of 64 instead and drop both guards. The
receiving side accumulates across recvmsg calls until the expected count
arrives, bounds every SCM_RIGHTS payload it reads by the control bytes the
kernel returned, rejects a batch that carries more descriptors than it
asked for, and closes the descriptors it already holds on any failure. A
session of 64 panes or fewer still produces one batch, so the bytes on the
wire are unchanged and HANDOFF_VERSION stays at 1.

refs herdrdev#3393

Co-authored-by: kataokatsuki <kataokatsuki@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* test: deflake windows metadata ttl expiry assertion (herdrdev#4050)

The clear-only metadata test used a 1 ms ttl, so on loaded Windows runners set_agent_metadata could see the entry as expired, drop it, and recreate it with a None ttl before next_agent_metadata_expiry() ran. Expiry is forced explicitly later in the test, so use a long ttl to keep the no-extension assertion independent of wall-clock scheduling.

* fix: detect kimi npm shim on windows (herdrdev#4053)

refs herdrdev#3317

* fix(remote): resolve ssh host aliases from git bash on windows (herdrdev#4054)

Windows OpenSSH resolves drive-letter Include paths, but Git for Windows' MSYS OpenSSH does not, so the managed remote SSH config silently ignored the user's ~/.ssh/config when herdr ran under Git Bash. Include the user config through ~/.ssh/config, which both implementations expand to the same file.

refs herdrdev#3947

* feat: add Letta Code detection and restore (herdrdev#3107)

refs herdrdev#3106

Co-authored-by: Cameron <cameron@pfiffer.org>

* fix(windows): disable host mouse reporting on terminal restore (herdrdev#4055)

Windows skipped the xterm mouse-reporting reset because clear_host_mouse_reporting was a no-op there. Standalone Git Bash (mintty) keeps SGR mouse reporting enabled after detach, so mouse motion leaks escape sequences into the shell. Emit the reset sequence on Windows too and include the X10 mode.

refs herdrdev#3748

* fix: keep hermes enabled list valid yaml (herdrdev#4056)

* fix: keep hermes enabled list valid yaml

refs herdrdev#3839

* fix: preserve hermes inline list quoting and comments

refs herdrdev#3839

* fix(ui): keep muted sidebar and tab labels readable (herdrdev#4062)

refs herdrdev#2692

* fix(windows): honor default_shell in login shell mode (herdrdev#4060)

* fix(windows): honor default_shell in login shell mode

Login-mode panes used portable-pty's default-program builder, which resolves to %ComSpec% (cmd.exe) on Windows and ignores the SHELL env override, so [terminal].default_shell was silently ignored. Build the launch command from the configured shell instead and append the shell's own login flag for POSIX-style shells that support one.

refs herdrdev#1445

* fix(windows): add csh and tcsh to login shell flags

refs herdrdev#1445

* fix(windows): keep powershell cwd reporting in login mode (herdrdev#4065)

Windows login-mode PowerShell panes are now launched directly, but the PowerShell prompt-based cwd integration was still gated to non-login mode, leaving those panes without repository-owned cwd reporting after Set-Location. Enable the existing integration for login-mode PowerShell and build the integration args on the shared direct-shell path.

Follow-up to herdrdev#4060.

* fix: keep an agent name through a process-exit observation (herdrdev#3574)

A process-exit observation is not proof the agent is gone: the same
observation can be wrong while the agent keeps running, and the name is
the only handle its owner has on the pane. Detection uncertainty already
preserves the name, so releasing it on the observation alone contradicts
that contract and leaves a live agent unreachable by name with a rename
as the only recovery.

Free the name at the point the agent actually leaves the pane - a
recorded exit with no agent detected any more - so a wrong observation
costs nothing and a real exit still releases the name for reuse.

refs herdrdev#3225

Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: auto-expire worktree action error banners (herdrdev#4063)

* fix: auto-expire worktree action error banners

refs herdrdev#1827

* fix: restart endpoint error timeout on repeated errors

Route every transient client-side action error through a setter that installs a fresh deadline, so an identical repeated message cannot inherit an older, nearly-expired deadline.

refs herdrdev#1827

* test: derive endpoint error expiry assertions from stored deadline

refs herdrdev#1827

* test: deflake federated local input race (herdrdev#4066)

refs herdrdev#3670

* fix: recognize kitty CSI-u codepoints for F1 through F12 (herdrdev#2378)

Codepoints 57364-57375 (F1-F12) were missing from the kitty-protocol codepoint table, so terminals that send function keys as full CSI-u sequences (e.g. Ghostty, which enables the kitty keyboard protocol by default) had those keys silently dropped. Confirmed live against a running herdr session: injecting the raw F3/F4 codepoint sequences did nothing before this fix and correctly triggered previous_tab/next_tab after.

refs herdrdev#1809

Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix(input): accept parameterized CSI-tilde F1-F4 keys (herdrdev#4067)

Terminals such as foot send F1-F4 as parameterized CSI-tilde sequences (for
example F3 as `\x1b[13;1:1~`). `parse_xterm_modified_special_sequence` mapped
codes 15-24 but not 11-14, so these presses were dropped before keybindings
saw them. Map 11-14 to F1-F4, matching the unmodified `\x1b[11~`..`\x1b[14~`
aliases already accepted.

refs herdrdev#1809

* fix: clean up failed terminal observer setup (herdrdev#4071)

refs herdrdev#3612

* chore: add jjliebig as approved contributor and maintainer

* feat: install windows remote host packages (herdrdev#3687)

* feat: install windows remote host packages

refs herdrdev#3651

* docs: clarify windows saved reconnect package behavior

refs herdrdev#3651

* fix: include windows installer in nix sources

refs herdrdev#3651

* fix: preserve paths in windows scp transfers

refs herdrdev#3651

* refactor: isolate windows remote package setup

refs herdrdev#3651

* feat: add ctrl-hover highlighting and fix wrapped links (herdrdev#4074)

refs herdrdev#1282

* fix(linux): bound the foreground process-tree scan (herdrdev#3674)

refs herdrdev#3621

Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: keep plugins working after client-only updates (herdrdev#4077)

* ci: migrate remaining pinned actions to node24 (herdrdev#4023)

* ci: migrate remaining pinned actions to node24

actions/cache@v4 and mlugg/setup-zig@v2.2.1 still target Node 20, which
GitHub removes from runners on 2026-09-23. Bump actions/cache to v6.1.0 and
replace mlugg/setup-zig with vercel-labs/setup-zig@v1.0.2.

vercel-labs/setup-zig takes only `version`, so the use-cache/cache-size-limit
tuning and Zig global-cache reuse are dropped. See the PR for alternatives.

* ci: restore zig caching for vercel setup-zig

vercel-labs/setup-zig has no cache controls, so redirect the Zig global cache
into the workspace .zig-cache and run the Zig build cache step on Linux too.

Drop this commit if we switch to a setup action that owns Zig caching, e.g.
step-security/setup-zig or xyzzylabs/setup-zig.

* fix: clarify agent integration settings description

* fix: scope agent views to the selected machine (herdrdev#3784)

* fix: scope agent views to the selected machine

refs herdrdev#3732

* fix: preserve stable agent view ordering

refs herdrdev#3732

---------

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix(windows): restore mouse reporting when reattaching (herdrdev#4080)

* fix(client): re-assert host mouse modes after a terminal reconnect (herdrdev#4079)

Co-authored-by: dengos <dengoswei@gmail.com>

* test(windows): deflake media player invalid media assertion (herdrdev#4082)

* test(windows): deflake media player invalid media assertion

The Windows sound test required MediaPlayer's MediaFailed event for invalid
media. Some runners never raise it, so the script exits through its playback
timer and the test saw "sound playback timed out" instead, panicking on the
MediaFailed assertion.

Accept either terminal error and keep the timer short under test via
HERDR_SOUND_TIMEOUT_SECONDS so a missed MediaFailed no longer waits out the
production 15 second bound.

* test(windows): keep media player timeout override test-only

Generate the short-timer player script only in tests instead of reading a
process environment override. This keeps the production script's fixed 15
second bound unchanged, and the script-content test now proves the test
variant rewrites the timer.

* fix: hide only kitty image placements overlapping overlays (herdrdev#4081)

* fix: clean up idle ssh bridges and back off flapping connections (herdrdev#4083)

* fix: clean up idle ssh bridges and back off flapping connections

* chore: keep ssh liveness smoke tooling local

* fix: preserve agent panel scroll when switching machines (herdrdev#4101)

refs herdrdev#3937

Root cause:
Activating another endpoint applies a snapshot with a different
endpoint-qualified graphics scope. This triggers reset_endpoint_projection,
which clears agent_scroll together with endpoint-local state even though
the agent list aggregates all machines. The selected agent receives focus,
but the list jumps back to the top.

Fix:
Save the client-owned agent scroll offset and restore it only when
activation changes endpoints. Keep same-endpoint reboot resets,
workspace/tab scroll resets, input cleanup and existing list bounds
clamping unchanged. This adds constant-time work on endpoint activation,
with no protocol, persisted-state or pane-scaled rendering changes.

Validation:
The new regression fails on the original implementation with scroll 0
instead of 6. Tests cover repeated bidirectional agent clicks, stable
visible rows, shrinking lists and same-machine reboots. All 242 client
shell tests pass.

Real SSH A/B testing against the same two disposable 0.9.0 servers
reproduces the reset with both the stable and current-master clients.
The patched client preserves the visible rows through six cross-machine
switches and two same-machine control clicks.

Native just ci passes: 3535 Rust tests, six default skips, plus lint,
maintenance, architecture and integration-asset checks. All seven docs
contract tests pass. Windows cross-lint was not run because its SDK is
not installed; native macOS and Windows UI behavior was not tested.

* fix: remove stale maintainer username

* fix: detect codex activity with static titles and queued inputs (herdrdev#4099)

* fix: detect codex activity with static titles and queued inputs

refs herdrdev#4092

Codex 0.154.0 can omit the activity bullet when tui.animations is false
and replace the literal Working label with a task-specific label. Its
terminal title can also remain static during an active turn, so the OSC
spinner rule is not sufficient to identify work.

The screen fallback required a bullet followed by Working in the last
three non-empty lines. It therefore missed both the animation-disabled
status line and dynamic labels. Queued follow-ups add a heading, input
text, and an edit hint below the activity line, moving that line outside
the three-line region. The lower-priority non-empty OSC title rule then
reported idle while Codex still showed an active timer and interrupt
control.

Recognize the elapsed-time and esc-to-interrupt controls in the detection
snapshot before the current composer. Allow an optional bullet, a dynamic
activity label, and queued follow-ups below that line. Require that no
later response, completion, or interruption marker supersedes the live
activity. This excludes composer text and stale output without letting an
earlier interruption suppress a subsequent active turn.

Keep OSC state precedence and transcript-viewer skip behavior unchanged.
Update the bundled and distributed manifests together to 2026.09.14.1.
Add regression coverage for optional bullets, dynamic labels, queued
inputs, resumed work after interruption, and stale or quoted controls.

Avoid discarding Regex search caches on every detection poll. The loader
previously cloned the entire compiled rule vector, and each Regex clone
created a fresh search cache pool despite sharing compiled read-only
state. Share the immutable rules through Arc instead. Reload publishes a
new array while in-flight readers retain a valid old generation, without
holding the global cache lock during matching. Add a cheap contains gate
for the required interrupt text before running the multiline expression.

Add a deterministic regression for compiled-rule sharing, reload
replacement, retained old readers, and concurrent detection. Measure the
baseline and optimized detector kernels in three alternating rounds on
CPU 24 with NUMA node 0 and CPU 25 with NUMA node 1. Real queued detection
falls from about 116 to 22 microseconds, and two evaluations per pane over
15 panes fall from about 3.45 to 0.65 milliseconds on both sockets, about
81 percent less time. No benchmark match results change. The cache
improvement requires the updated binary, not just a manifest reload.

Validate on the official Herdr 0.9.0 release with Codex 0.154.0 by toggling
the old and new manifests during the same active queued task. Confirm
working for active turns and idle after completion or interruption.
Pass 86 captured-screen and semantic checks through the optimized source
binary, 69 manifest/cache tests, CPU-pinned render scaling, and the full
native CI suite: 3535 Rust tests passed, with six default skips. Run CI
serially with inherited Herdr session context removed; no tests were
excluded or expectations relaxed to make CI pass.

* fix: detect codex pending follow-ups as working

refs herdrdev#4092

* fix: handle wrapped codex follow-up hints

refs herdrdev#4092

---------

Co-authored-by: Ogulcan Celik <ogulcancelik@gmail.com>

* fix: detect pi working border (herdrdev#4113)

refs herdrdev#3629

* ci: restore zig local build cache reuse (herdrdev#4118)

* fix: default pane splits to the calling pane (herdrdev#4123)

* fix: restore saved machine screens after reconnect (herdrdev#4126)

refs herdrdev#3842

* fix: scope window titles to each client view (herdrdev#4130)

refs herdrdev#4091

* fix(windows): avoid lossy native Win32 input mode (herdrdev#4133)

refs herdrdev#3932
refs herdrdev#3702
refs herdrdev#3910

* fix: keep modified enter compatible with legacy panes (herdrdev#4110)

* fix: keep modified enter compatible with legacy panes

refs herdrdev#4103

* fix: synchronize modified key negotiation state

refs herdrdev#4103

* test: cover windows legacy modified enter

refs herdrdev#4103

---------

Co-authored-by: Jonathan Liebig <jonathan.liebig@gmail.com>

* fix: avoid resending terminal cells for metadata updates (herdrdev#4137)

* feat: add cursor-based editing to text inputs (herdrdev#3698)

* feat: add cursor-based editing to text inputs

refs herdrdev#1803

* fix: preserve dialog actions with associated text

refs herdrdev#1803

* refactor: simplify text editor outcomes and tests

refs herdrdev#1803

---------

Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: protect integration configs from failed writes (herdrdev#3973)

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

* fix: atomically write integration configs

refs herdrdev#3970

---------

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>

* fix: map pixel mouse by integer cell pitch (herdrdev#4140)

refs herdrdev#3295

* fix: reject stale pane surfaces after reconnect (herdrdev#4141)

* test: deflake recent CI failures (herdrdev#4139)

* fix(windows): batch input trace diagnostics (herdrdev#4146)

refs herdrdev#3932

* fix(windows): prefer VT input for SSH clients (herdrdev#4148)

refs herdrdev#3932

* fix: reveal the full last tab in overflowing tab strips (herdrdev#4152)

refs herdrdev#4151

Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>

* chore: guard the ziki agent enum against future sync drops

The 2026-09-15 sync showed the gap: both sides added an Agent variant and
each bumped only its own array length in src/detect/mod.rs, so the union
auto-merged one entry short and did not compile. Nothing in
FORK_OWNED_FILES covered the file, so the marker guardrail could not see it.

refs #50

* fix: address review comments on #52

refs #50

---------

Co-authored-by: Can Celik <ogulcancelik@gmail.com>
Co-authored-by: akbash <akbash@herdr.dev>
Co-authored-by: akbash-bot <300245827+akbash-bot@users.noreply.github.com>
Co-authored-by: JJ Liebig <jonathan.liebig@gmail.com>
Co-authored-by: Kataoka Katsuki <49934462+kataokatsuki@users.noreply.github.com>
Co-authored-by: kataokatsuki <kataokatsuki@users.noreply.github.com>
Co-authored-by: Cameron <cameron@pfiffer.org>
Co-authored-by: caner-akca <94343893+caner-akca@users.noreply.github.com>
Co-authored-by: Kakumanu Ashok Reddy <kakumanuashokreddyias2024@gmail.com>
Co-authored-by: dengos <dengoswei@gmail.com>
Co-authored-by: Eric Yue <jiacheng.yue@foxmail.com>
Co-authored-by: Mark Jaquith <mark@jaquith.me>
Co-authored-by: zuraffa-review[bot] <326983185+zuraffa-review[bot]@users.noreply.github.com>