TeoSlayer · TeoSlayer · Sep 14, 2026 · Sep 14, 2026
@@ -4,12 +4,18 @@ All notable user-visible changes are recorded here. Versions follow [Semantic Ve
 
 ## Unreleased
 
+## [0.15.1] — 2026-09-14
+
 ### Changed
 
 - Made account deletion a visible danger-zone action while keeping the existing
   reauthentication and typed-email confirmation safeguards.
 - Marked Refstream clearly as an unstable alpha when selected and replaced its
   translucent app chrome with an opaque terminal-native palette.
+- Prevented historical terminal capability queries in a restored snapshot from
+  being answered into the live process, which could corrupt tmux input.
+- Updated the optional Refstream renderer to `v0.1.0-alpha.5` from its verified
+  browser release. xterm.js remains the default.
 
 ## [0.15.0] — 2026-09-14
 

@@ -80,6 +80,11 @@ shell kill <id>                           # stop a session
 Press `Ctrl-X`, then `D`, to detach from an attached session. See
 [`shell help reference`](https://shell.online/cli/) for every command and option.
 
+Full-screen and nested terminals are supported. Release checks exercise tmux,
+Herdr, and mosh-style redraw, input, split-pane, and reconnect behavior; a
+restored browser snapshot cannot answer historical terminal queries into the
+live process.
+
 File sharing is disabled unless `--files` or `--files-root` is present. Once
 enabled, browsers can browse that root and open referenced files on demand.
 Paths and contents use the session's E2EE WebSocket; the CLI rejects traversal,
@@ -94,7 +99,7 @@ survive panel changes and reconnection. Reload recovery is kept only in that
 browser tab for up to four hours and still requires the local process to be
 running. Revoking access is immediate and does not stop the terminal. Files stay
 unavailable unless the host separately used `--files` or `--files-root`.
-See the [agent handoff protocol](https://github.com/TeoSlayer/refstream.js/blob/v0.1.0-alpha.4/docs/agents.md).
+See the [agent handoff protocol](https://github.com/TeoSlayer/refstream.js/blob/v0.1.0-alpha.5/docs/agents.md).
 
 ## Security
 

@@ -1,8 +1,8 @@
 import { useCallback, useEffect, useRef, useState, type FormEvent } from "react";
 import { ArrowClockwise, LockKey } from "@phosphor-icons/react";
 import "@xterm/xterm/css/xterm.css";
-import "../../../web/vendor/refstream/v0.1.0-alpha.4/refstream.css";
-import "../../../web/vendor/refstream/v0.1.0-alpha.4/ui.css";
+import "../../../web/vendor/refstream/v0.1.0-alpha.5/refstream.css";
+import "../../../web/vendor/refstream/v0.1.0-alpha.5/ui.css";
 import { TerminalConnection, type ConnectionStatus } from "./connection";
 import { DESKTOP_TERMINAL_GRID, type TerminalGrid } from "./terminal-grid";
 import { fittedTerminal, type TerminalCell } from "./terminal-fit";
@@ -261,6 +261,8 @@ export function TerminalPane({
       });
     }
 
+    let snapshotGeneration = 0;
+    let rendererInputSuppressed = false;
     connected = new TerminalConnection({
       url: target.url,
       fragment: encryptionFragment(shareUrl),
@@ -311,8 +313,16 @@ export function TerminalPane({
           if (worked.source !== "vault") void keepIfMissing(sessionId, worked.password);
         },
         onData: (bytes, reset) => {
-          if (reset) term.reset();
-          term.write(bytes);
+          if (!reset) {
+            term.write(bytes);
+            return;
+          }
+          const generation = ++snapshotGeneration;
+          rendererInputSuppressed = true;
+          term.reset();
+          term.write(bytes, () => {
+            if (generation === snapshotGeneration) rendererInputSuppressed = false;
+          });
         },
         onFileFrame: (frame) => { fileClient.handle(frame); },
         onReadOnly: (value) => {
@@ -357,7 +367,7 @@ export function TerminalPane({
       : null;
 
     const typed = term.onData((data) => {
-      if (!canTypeRef.current) return;
+      if (!canTypeRef.current || rendererInputSuppressed) return;
       connected.send(data);
       sink?.observe(data);
     });

@@ -3,7 +3,7 @@ import {
   type ITerminalInitOnlyOptions,
   type ITerminalOptions,
 } from "@xterm/xterm";
-import { Terminal as RefstreamTerminal } from "../../../web/vendor/refstream/v0.1.0-alpha.4/refstream.js";
+import { Terminal as RefstreamTerminal } from "../../../web/vendor/refstream/v0.1.0-alpha.5/refstream.js";
 
 export type TerminalRenderer = "xterm" | "refstream";
 export const DEFAULT_TERMINAL_RENDERER: TerminalRenderer = "xterm";

@@ -1,10 +1,10 @@
 services:
   shell-online:
-    image: ghcr.io/teoslayer/shell.online:0.15.0
+    image: ghcr.io/teoslayer/shell.online:0.15.1
     build:
       context: .
       args:
-        VERSION: "0.15.0"
+        VERSION: "0.15.1"
     restart: unless-stopped
     environment:
       SHELL_ONLINE_E2EE_PASSWORD: "${SHELL_ONLINE_E2EE_PASSWORD:-}"

@@ -1,5 +1,5 @@
 {
-  "version": "0.15.0",
+  "version": "0.15.1",
   "pages": {
     "docs": {
       "eyebrow": "Documentation",
@@ -103,6 +103,10 @@
           "Screen recovery",
           "A bounded local ring buffer restores new or returning viewers. If live output outruns either network or rendering, shell.online drops stale display work and sends one authoritative screen snapshot."
         ],
+        [
+          "Nested terminals and multiplexers",
+          "Snapshot restoration suppresses replies to historical terminal queries, so joining or reconnecting cannot inject capability responses into the live PTY. tmux, Herdr, and mosh-style input, redraw, split-pane, and second-viewer flows are exercised as compatibility checks."
+        ],
         [
           "Backpressure by design",
           "PTY reads never wait indefinitely for Cloudflare. WebSocket writes time out, queues are bounded, frames have size and traffic limits, and high-output processes keep running locally."
@@ -645,7 +649,7 @@
       "cards": [
         [
           "Start once",
-          "Pull ghcr.io/teoslayer/shell.online:0.15.0 or run docker compose up --build -d, then docker compose logs shell-online. First launch prints the stable URL and a generated ten-character password. The tagged amd64/arm64 image includes an SBOM and build provenance."
+          "Pull ghcr.io/teoslayer/shell.online:0.15.1 or run docker compose up --build -d, then docker compose logs shell-online. First launch prints the stable URL and a generated ten-character password. The tagged amd64/arm64 image includes an SBOM and build provenance."
         ],
         [
           "Two durable volumes",

@@ -18,8 +18,8 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 ## Refstream.js — MIT
 
 Copyright (c) 2026 Calin Teodor. The MIT license above applies. The vendored
-browser build is v0.1.0-alpha.4; its complete license and provenance are in
-[`web/vendor/refstream/v0.1.0-alpha.4/`](../web/vendor/refstream/v0.1.0-alpha.4/).
+browser build is v0.1.0-alpha.5; its complete license and provenance are in
+[`web/vendor/refstream/v0.1.0-alpha.5/`](../web/vendor/refstream/v0.1.0-alpha.5/).
 
 ## ws — MIT
 

@@ -70,7 +70,7 @@
           },
           "applicationCategory": "DeveloperApplication",
           "operatingSystem": "macOS, Windows, Linux, FreeBSD, OpenBSD, NetBSD, DragonFly BSD, Solaris",
-          "softwareVersion": "0.15.0",
+          "softwareVersion": "0.15.1",
           "softwareRequirements": "A supported architecture, outbound HTTPS and WebSockets, and a PTY or Windows ConPTY",
           "isAccessibleForFree": true,
           "downloadUrl": "https://shell.online/install",

@@ -1,6 +1,6 @@
 {
   "name": "shell-online",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Turn any terminal process into a collaborative browser link.",
   "private": true,
   "license": "MIT",

@@ -24,9 +24,9 @@ The Homebrew formula builds locally: Brew fetches the checksum-pinned tagged sou
 
 The standalone installer uses a checksum-pinned release binary. To compile and run the tagged source outside either installation path:
 
-git clone --depth 1 --branch v0.15.0 https://github.com/TeoSlayer/shell.online.git
+git clone --depth 1 --branch v0.15.1 https://github.com/TeoSlayer/shell.online.git
 cd shell.online
-go build -trimpath -ldflags="-X main.version=0.15.0" -o ./shell ./cmd/shell
+go build -trimpath -ldflags="-X main.version=0.15.1" -o ./shell ./cmd/shell
 ./shell --version
 
 The source-build path requires Go 1.26.8 or newer, except Go 1.27.x is intentionally unsupported on MIPS64 because of go.dev/issue/80978. Keep using ./shell or move it to a directory on PATH.
@@ -99,6 +99,8 @@ shell kill --all
 
 `shell attach` opens the existing PTY locally. Its terminal title keeps a Ctrl-X D to detach reminder visible even when a full-screen TUI redraws the terminal. Press Ctrl-X, release it, then press D to detach without stopping it (Ctrl-] remains a legacy alternative); the wrapper intercepts the sequence before the child process receives it. Input and output remain mirrored to browser viewers. Anonymous presence and a brief per-typist input lease prevent remote keystrokes from interleaving.
 
+Full-screen and nested terminals are supported. Snapshot restoration suppresses replies to historical terminal queries, so a joining or reconnecting browser cannot inject old capability responses into tmux, Herdr, mosh, or another live TUI.
+
 Sessions close immediately when their task exits. `--auto-close 5m` or an absolute/local date adds an earlier deadline; supported duration units are ms, s, m, h, d, w, mo, and y.
 
 ROS 1 and ROS 2 processes need no plugin: source the ROS environment, then run `shell roscore`, `shell roslaunch <package> <launch-file>`, `shell ros2 run <package> <executable>`, or `shell ros2 launch <package> <launch-file>`. shell.online platform support does not expand the supported platforms of the installed ROS distribution.

@@ -1,6 +1,6 @@
 import { describe, expect, it, vi } from "vitest";
 import { bindRefstreamSessionPersistence } from "../web/refstream-session";
-import type { SessionSnapshot } from "../web/vendor/refstream/v0.1.0-alpha.4/refstream.js";
+import type { SessionSnapshot } from "../web/vendor/refstream/v0.1.0-alpha.5/refstream.js";
 
 function snapshot(sequence: number): SessionSnapshot {
   return { version: 1, sequence, terminal: {}, commands: [] };

@@ -7,7 +7,7 @@ import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
 const root = dirname(dirname(fileURLToPath(import.meta.url)));
-const vendor = join(root, "web/vendor/refstream/v0.1.0-alpha.4");
+const vendor = join(root, "web/vendor/refstream/v0.1.0-alpha.5");
 
 interface Manifest {
   version: string;
@@ -16,10 +16,10 @@ interface Manifest {
 }
 
 describe("vendored Refstream browser release", () => {
-  it("matches every file in the signed alpha.4 release manifest", async () => {
+  it("matches every file in the signed alpha.5 release manifest", async () => {
     const manifest = JSON.parse(await readFile(join(vendor, "manifest.json"), "utf8")) as Manifest;
-    expect(manifest.version).toBe("0.1.0-alpha.4");
-    expect(manifest.gitRevision).toBe("44dd17cf69e067b859b9ab09ba988088beaa4fd6");
+    expect(manifest.version).toBe("0.1.0-alpha.5");
+    expect(manifest.gitRevision).toBe("131a71335f05344f3018c43a76ffbe7376493a34");
 
     for (const [name, expected] of Object.entries(manifest.files)) {
       const contents = await readFile(join(vendor, name));

@@ -48,6 +48,18 @@ describe("mobile terminal write queue", () => {
     expect(terminal.writes).toEqual([[1, 2, 3, 4], [5, 6]]);
   });
 
+  it("completes a snapshot only after its final render job", () => {
+    const terminal = new FakeTerminal();
+    const queue = new TerminalWriteQueue(terminal, 4);
+    let completed = 0;
+
+    queue.enqueue(new Uint8Array([1, 2, 3, 4, 5]), true, () => { completed += 1; });
+    terminal.completeNext();
+    expect(completed).toBe(0);
+    terminal.completeNext();
+    expect(completed).toBe(1);
+  });
+
   it("drops stale queued output when a fresh snapshot arrives", () => {
     const terminal = new FakeTerminal();
     const queue = new TerminalWriteQueue(terminal, 8);

@@ -1,7 +1,7 @@
 import type { ITheme } from "@xterm/xterm";
 import "@xterm/xterm/css/xterm.css";
-import "./vendor/refstream/v0.1.0-alpha.4/refstream.css";
-import "./vendor/refstream/v0.1.0-alpha.4/ui.css";
+import "./vendor/refstream/v0.1.0-alpha.5/refstream.css";
+import "./vendor/refstream/v0.1.0-alpha.5/ui.css";
 import {
   decodeLatencyProbe,
   encodeFrame,
@@ -892,6 +892,8 @@ function renderTerminal(sessionId: string): void {
   let presenceTimer: number | undefined;
   let readOnly = false;
   let snapshotRequestPending = false;
+  let terminalSnapshotGeneration = 0;
+  let rendererInputSuppressed = false;
   const terminalInput = new TerminalInputQueue(() => socket);
   const destructiveInput = new DestructiveInputGuard();
   let destructiveInputTimer: number | undefined;
@@ -1432,7 +1434,11 @@ function renderTerminal(sessionId: string): void {
         if (fileClient.handle(frame)) return;
         if (receiveLatencyResponse(frame)) return;
         if (isSnapshotOpcode(frame[0])) {
-          terminalWrites.enqueue(frame.subarray(1), true);
+          const generation = ++terminalSnapshotGeneration;
+          rendererInputSuppressed = true;
+          terminalWrites.enqueue(frame.subarray(1), true, () => {
+            if (generation === terminalSnapshotGeneration) rendererInputSuppressed = false;
+          });
           snapshotRequestPending = false;
         } else if (frame[0] === Opcode.Output) {
           if (!terminalWrites.enqueue(frame.subarray(1)) && !snapshotRequestPending) {
@@ -1612,6 +1618,10 @@ function renderTerminal(sessionId: string): void {
   });
 
   const sendTerminalData = (bytes: Uint8Array): void => {
+    // A raw terminal snapshot can contain old device-attribute queries from a
+    // TUI startup. Replaying it must not answer those queries into the live
+    // PTY after the application has already moved on.
+    if (rendererInputSuppressed) return;
     if (bytes.byteLength === 1 && bytes[0] === 4) {
       confirmEOF();
       return;

@@ -1,7 +1,7 @@
 import type {
   SessionSnapshot,
   TerminalSession,
-} from "./vendor/refstream/v0.1.0-alpha.4/refstream.js";
+} from "./vendor/refstream/v0.1.0-alpha.5/refstream.js";
 
 const SNAPSHOT_VERSION = 1;
 const MAX_SNAPSHOT_AGE_MS = 4 * 60 * 60 * 1_000;

@@ -1,5 +1,5 @@
-import { getTerminalSession } from "./vendor/refstream/v0.1.0-alpha.4/refstream.js";
-import { attachTerminalTools, type TerminalTools } from "./vendor/refstream/v0.1.0-alpha.4/ui.js";
+import { getTerminalSession } from "./vendor/refstream/v0.1.0-alpha.5/refstream.js";
+import { attachTerminalTools, type TerminalTools } from "./vendor/refstream/v0.1.0-alpha.5/ui.js";
 import { bindRefstreamSessionPersistence } from "./refstream-session";
 
 const REFSTREAM_THEMES = [

@@ -3,7 +3,7 @@ import {
   type ITerminalInitOnlyOptions,
   type ITerminalOptions,
 } from "@xterm/xterm";
-import { Terminal as RefstreamTerminal } from "./vendor/refstream/v0.1.0-alpha.4/refstream.js";
+import { Terminal as RefstreamTerminal } from "./vendor/refstream/v0.1.0-alpha.5/refstream.js";
 
 export type TerminalRenderer = "xterm" | "refstream";
 export const DEFAULT_TERMINAL_RENDERER: TerminalRenderer = "xterm";

@@ -6,6 +6,7 @@ export interface TerminalWriteTarget {
 interface PendingTerminalWrite {
   data: Uint8Array;
   reset: boolean;
+  complete?: () => void;
 }
 
 export class TerminalWriteQueue {
@@ -20,7 +21,7 @@ export class TerminalWriteQueue {
     private readonly maximumPendingBytes = 1024 * 1024,
   ) {}
 
-  enqueue(data: Uint8Array, reset = false): boolean {
+  enqueue(data: Uint8Array, reset = false, complete?: () => void): boolean {
     if (reset) {
       this.pending.length = 0;
       this.pendingBytes = 0;
@@ -33,13 +34,14 @@ export class TerminalWriteQueue {
     }
 
     if (data.byteLength === 0) {
-      this.pending.push({ data: new Uint8Array(), reset });
+      this.pending.push({ data: new Uint8Array(), reset, complete });
     } else {
       for (let offset = 0; offset < data.byteLength; offset += this.maximumBatchBytes) {
         const end = Math.min(data.byteLength, offset + this.maximumBatchBytes);
         this.pending.push({
           data: new Uint8Array(data.subarray(offset, end)),
           reset: reset && offset === 0,
+          complete: end === data.byteLength ? complete : undefined,
         });
         this.pendingBytes += end - offset;
       }
@@ -57,6 +59,7 @@ export class TerminalWriteQueue {
     if (first.reset) this.target.reset();
 
     const chunks = [first.data];
+    const completions: Array<() => void> = first.complete ? [first.complete] : [];
     let byteLength = first.data.byteLength;
     while (
       this.pending.length > 0 &&
@@ -66,6 +69,7 @@ export class TerminalWriteQueue {
       const next = this.pending.shift()!;
       this.pendingBytes -= next.data.byteLength;
       chunks.push(next.data);
+      if (next.complete) completions.push(next.complete);
       byteLength += next.data.byteLength;
     }
 
@@ -81,6 +85,7 @@ export class TerminalWriteQueue {
 
     this.writing = true;
     this.target.write(output, () => {
+      for (const complete of completions) complete();
       this.writing = false;
       this.flush();
     });