feat: AI commit messages, change tree, router behavesAs, sidebar times (v2.2.0)

- Changes panel: Files and Changes merged into one panel; the overview's
  groups drawn as a folder tree (compacted chains, file counts, fold,
  stage/unstage a whole folder)
- AI-suggested commit message for what is staged
  (POST /api/lanes/:id/git/commit-message, claude -p --safe-mode, haiku)
- AI Router: optional "Behaves as" Claude model id, written as
  modelPicker options into the router's --settings file (issue #56)
- Sidebar: session rows show last activity, live rows their start time;
  a closed Terminal row can be removed (DELETE /api/run/history/:id)
- Every pane's CLI starts only once a client is attached; claude panes
  no longer forced inline; tmux scrollbar one column wide
- Update notifier: "Check for updates" reopens a closed notice

server/lib/pty-run.js

@@ -60,6 +60,23 @@ const ALLOWED_PERMISSION_MODES = new Set([
 ]);
 // Pane commands that mean "idle shell prompt, safe to type a command into".
 const SHELL_COMMANDS = new Set(["sh", "bash", "zsh", "fish", "dash", "ksh", "csh", "tcsh"]);
+
+/**
+ * `sh` that waits until a client is attached to the pane — 2 s at most
+ * ({@link CLIENT_WAIT_MS}) — before what follows it runs. A session is born
+ * 80×24 and takes the browser's size only on attach (and `enableMouse`'s
+ * scrollbar narrows it before that). Anything drawn before then is wrong:
+ * a shell's prompt (issue #55), and an inline `claude`'s banner — tmux
+ * re-wraps the 80-column rules into two lines each on the resize, pushing the
+ * banner's first lines into history, and claude's redraw clears only the
+ * visible screen, so they stay above it as a duplicate. Not "the first
+ * SIGWINCH": the scrollbar fires one before any client is there. A tmux that
+ * cannot answer ends the wait at once, i.e. the old behaviour.
+ */
+const WAIT_FOR_CLIENT =
+  'i=0; while [ "$(tmux display -p -t "$TMUX_PANE" \'#{session_attached}\' 2>/dev/null)" = 0 ]' +
+  " && [ $i -lt 20 ]; do sleep 0.1; i=$((i+1)); done;";
+const CLIENT_WAIT_MS = 2000;
 const CODEX_SANDBOXES = new Set(["read-only", "workspace-write", "danger-full-access"]);
 const CODEX_APPROVALS = new Set(["on-request", "never"]);
 // Codex has no `--effort` flag; reasoning effort is a config override.
@@ -452,11 +469,10 @@ function spawnRun(args) {
     // journals and the router layer `-p <name>` loads live there — and the
     // tmux server's own env may predate, or never have had, CODEX_HOME.
     ...(tool === "codex" ? { CODEX_HOME: getCodexHome() } : {}),
-    // Claude Code inline even under `"tui": "fullscreen"`: on the alternate
-    // screen tmux keeps no history and draws no pane scrollbar, so the
-    // dashboard terminal had nothing to drag. The user's own terminals keep
-    // their setting — this reaches only panes AgentHub starts.
-    ...(tool === "claude" ? { CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN: "1" } : {}),
+    // No CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN: an inline claude duplicated its
+    // output whenever the pane narrowed (tmux re-wraps the full-width rules and
+    // pushes lines into history its redraw cannot clear). The user's own
+    // `"tui"` setting decides; under fullscreen the pane scrolls in Claude.
     ...routerSpawn.env,
     ...(bypass === true && entry.bypassEnv ? entry.bypassEnv : {}),
   };
@@ -472,12 +488,18 @@ function spawnRun(args) {
       } catch {
         /* pane gone mid-paste — nothing to deliver to */
       }
-    }, entry.prompt.delayMs);
+    }, entry.prompt.delayMs + CLIENT_WAIT_MS); // the CLI may start up to that late
     if (timer.unref) timer.unref();
   };
 
   if (!tmux.hasSession(id)) {
-    tmux.newSession({ name: id, cwd, argv, env });
+    // argv rides as sh's positional parameters, never inside the script text.
+    tmux.newSession({
+      name: id,
+      cwd,
+      argv: ["sh", "-c", `${WAIT_FOR_CLIENT} exec "$@"`, "sh", ...argv],
+      env,
+    });
     record();
     schedulePaste();
   } else if (SHELL_COMMANDS.has(tmux.paneCommand(id) || "")) {
@@ -530,18 +552,14 @@ function spawnShell({ laneId, slot = 0, cwd }) {
     ...(process.env.PATH ? { PATH: process.env.PATH } : {}),
     ...desktopEnv(),
   };
-  // The session is born 80×24 and only takes the browser's size when the pane
-  // attaches. A shell started at once printed its prompt at 80 columns (a long
-  // cwd wrapped), and readline's redraw after the resize left the cursor on top
-  // of the prompt (issue #55). So wait until a client is attached — 2 s at
-  // most — then exec the login shell tmux would have run (tmux sets SHELL in the
-  // pane). Not "the first SIGWINCH": the scrollbar `enableMouse` turns on
-  // resizes the pane before any client is there. A tmux that cannot answer
-  // ends the wait at once, i.e. the old behaviour.
-  const waitForSize =
-    "i=0; while [ \"$(tmux display -p -t \"$TMUX_PANE\" '#{session_attached}' 2>/dev/null)\" = 0 ]" +
-    ' && [ $i -lt 20 ]; do sleep 0.1; i=$((i+1)); done; exec "$SHELL" -l';
-  tmux.newSession({ name: id, cwd, argv: ["sh", "-c", waitForSize], env });
+  // Started once the pane has its real size (WAIT_FOR_CLIENT, issue #55), as
+  // the login shell tmux would have run (tmux sets SHELL in the pane).
+  tmux.newSession({
+    name: id,
+    cwd,
+    argv: ["sh", "-c", `${WAIT_FOR_CLIENT} exec "$SHELL" -l`],
+    env,
+  });
   dashboardRuns?.recordRun({
     id,
     sessionId: null,