Release v6.2.8 tmux managed policy

Author: SeemSeam

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+## v6.2.8 (2026-05-21)
+
+### Config Source, Stop Cleanup, And Tmux Policy Release
+
+- **Config Source Fixes Included**: the current release package includes explicit config source kinds for built-in defaults, user `~/.ccb/ccb.config`, and project `.ccb/ccb.config`, with project config taking highest priority.
+- **Kill Cleanup Ordering Included**: `stop_all` defers project tmux namespace destruction until after the socket response finalizer so `ccb kill` and `ccb kill -f` can complete cleanup from inside a CCB pane.
+- **Managed Tmux Policy Follow-Up Added**: isolated managed tmux sessions now explicitly enable CCB-owned `mouse on` and `set-clipboard on` policy in project namespaces and detached tmux paths.
+
 ## v6.2.7 (2026-05-21)
 
 ### Config Source And Stop Cleanup Release

README.md

@@ -7,7 +7,7 @@
   <img src="https://img.shields.io/badge/Every_Model_Controllable-CF1322?style=for-the-badge" alt="Every Model Controllable">
 </p>
 
-[![Version](https://img.shields.io/badge/version-6.2.7-orange.svg)]()
+[![Version](https://img.shields.io/badge/version-6.2.8-orange.svg)]()
 [![Platform](https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20Windows-lightgrey.svg)]()
 
 **English** | [Chinese](README_zh.md)
@@ -74,9 +74,9 @@ Build project-local teams with roles, pane layout, provider state, worktree isol
 <details>
 <summary><b>Latest release highlights</b></summary>
 
-- **Config sources are explicit**: CCB now reports whether the effective config came from the built-in default, user `~/.ccb/ccb.config`, or project `.ccb/ccb.config`.
-- **`ccb config validate` shows the active layer**: validation output now includes `config_source_kind` and `used_builtin_default`, and docs/`ccb_config` guidance match the three-layer precedence.
+- **Config sources are explicit**: CCB reports whether the effective config came from the built-in default, user `~/.ccb/ccb.config`, or project `.ccb/ccb.config`.
 - **`ccb kill` cleanup is ordered after the response**: project tmux namespace destruction is deferred until after `stop_all` finalization, so cleanup completes even when kill is launched from a CCB tmux pane.
+- **Managed tmux stays isolated but usable**: CCB now explicitly enables owned `mouse on` and `set-clipboard on` policy in project namespaces and detached tmux paths.
 
 See [Release Notes](#release-notes) for the full history.
 
@@ -338,6 +338,15 @@ Thanks to the [Linux.do community](https://linux.do) for testing, feedback, and
 Historical note: older release notes below may mention `askd`, legacy flags, or removed commands. Those references are kept only as changelog history and do not redefine the current CLI surface.
 
 <details open>
+<summary><b>v6.2.8</b> - Config Source, Stop Cleanup, And Tmux Policy Release</summary>
+
+- Includes explicit config source kinds for built-in defaults, user `~/.ccb/ccb.config`, and project `.ccb/ccb.config`, with project config taking highest priority.
+- Keeps project tmux namespace destruction deferred until after the stop-all response finalizer so `ccb kill` / `ccb kill -f` can complete cleanup from inside a CCB pane.
+- Keeps managed tmux config isolated while explicitly enabling CCB-owned mouse and clipboard support in project namespaces and detached tmux paths.
+
+</details>
+
+<details>
 <summary><b>v6.2.7</b> - Config Source And Stop Cleanup Release</summary>
 
 - Reports explicit config source kinds for built-in defaults, user `~/.ccb/ccb.config`, and project `.ccb/ccb.config`, with project config taking highest priority.

README_zh.md

@@ -7,7 +7,7 @@
   <img src="https://img.shields.io/badge/模型皆可控-CF1322?style=for-the-badge" alt="模型皆可控">
 </p>
 
-[![Version](https://img.shields.io/badge/version-6.2.7-orange.svg)]()
+[![Version](https://img.shields.io/badge/version-6.2.8-orange.svg)]()
 [![Platform](https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20Windows-lightgrey.svg)]()
 
 [English](README.md) | **中文**
@@ -74,9 +74,9 @@
 <details>
 <summary><b>最新版本亮点</b></summary>
 
-- **配置来源显式化**：CCB 现在会报告当前配置来自内置默认、用户 `~/.ccb/ccb.config`，还是项目 `.ccb/ccb.config`。
-- **`ccb config validate` 显示生效层级**：validate 输出新增 `config_source_kind` 和 `used_builtin_default`，README/docs/`ccb_config` 说明也对齐三层优先级。
+- **配置来源显式化**：CCB 会报告当前配置来自内置默认、用户 `~/.ccb/ccb.config`，还是项目 `.ccb/ccb.config`。
 - **`ccb kill` 清理顺序修复**：project tmux namespace destroy 延后到 `stop_all` 回包后的 finalize 阶段，避免从 CCB tmux pane 执行 kill 时清理只跑一半。
+- **Managed tmux 继续隔离但保留可用性**：CCB 在 project namespace 和 detached tmux 路径中显式启用自有 `mouse on` 与 `set-clipboard on` policy。
 
 完整历史见 [新版本记录](#新版本记录)。
 
@@ -329,6 +329,15 @@ ccb reinstall
 历史说明：下面较旧的发布记录里仍可能出现 `askd`、旧 flag 或已移除命令。这些内容仅作为 changelog 历史保留，不代表当前 CLI 入口。
 
 <details open>
+<summary><b>v6.2.8</b> - Config Source, Stop Cleanup, And Tmux Policy Release</summary>
+
+- 包含显式配置来源：内置默认、用户 `~/.ccb/ccb.config`、项目 `.ccb/ccb.config`，并保持项目配置优先级最高。
+- 继续将 project tmux namespace destroy 延后到 stop-all response finalizer 之后，让从 CCB pane 执行的 `ccb kill` / `ccb kill -f` 能完成后台清理。
+- 保持 managed tmux 配置隔离，同时在 project namespace 和 detached tmux 路径中显式启用 CCB-owned mouse/clipboard support。
+
+</details>
+
+<details>
 <summary><b>v6.2.7</b> - Config Source And Stop Cleanup Release</summary>
 
 - 显式报告配置来源：内置默认、用户 `~/.ccb/ccb.config`、项目 `.ccb/ccb.config`，并保持项目配置优先级最高。

VERSION

@@ -1 +1 @@
-6.2.7
+6.2.8

ccb

@@ -21,7 +21,7 @@ backend_env = get_backend_env()
 if backend_env and not os.environ.get("CCB_BACKEND_ENV"):
     os.environ["CCB_BACKEND_ENV"] = backend_env
 
-VERSION = "6.2.7"
+VERSION = "6.2.8"
 GIT_COMMIT = "release"
 GIT_DATE = "2026-05-11"
 

docs/ccbd-startup-supervision-contract.md

@@ -101,6 +101,9 @@ Out of scope:
 - Startup, supervision, and shutdown must be reasoned per project anchor, never globally.
 - CCB-managed tmux servers must be started with an isolated tmux config so user-level
   tmux plugins, hooks, and global options cannot alter project pane topology.
+- Any tmux behavior CCB depends on after config isolation, including mouse and
+  clipboard support, must be applied as CCB-owned server policy rather than
+  inherited from user `.tmux.conf`.
 
 ### 5.2 One Authoritative Backend
 
@@ -419,7 +422,7 @@ Project namespace compatibility:
 - for a fresh namespace, the `cmd` pane bootstrap happens only after layout finalization and must replace that silent placeholder in place
 - project-namespace bootstrap must treat tmux server warmup and tmux server-policy persistence as separate steps:
   - `prepare_server` warms the server boundary only
-  - server-global options that require a live session, such as `destroy-unattached off`, must be applied only after the authoritative project session exists
+  - server-global options that require a live session, such as `destroy-unattached off`, CCB-managed `mouse on`, and CCB-managed `set-clipboard on`, must be applied only after the authoritative project session exists
 - project-owned pane mutation commands, including `respawn-pane` used by `cmd` bootstrap and pane-backed runtime launch/relaunch, must use the same shared tmux ready-retry budget as namespace create/reflow rather than a separate shorter timeout
 - namespace session liveness on the project-owned tmux socket must treat both `can't find session` and `no server running on <project socket>` as "namespace absent" for create/recreate decisions; startup must not fail that path as a generic tmux inspect error
 - startup must not rely on "real shell first, respawn later" behavior for the `cmd` pane, because that leaves stale prompt residue and can surface zsh no-newline `%` markers

lib/ccbd/services/project_namespace_runtime/backend.py

@@ -48,6 +48,20 @@ def ensure_server_policy(backend, *, timeout_s: float | None = None) -> None:
         failure_message='failed to persist tmux destroy-unattached policy',
         timeout_s=timeout_s,
     )
+    _apply_optional_server_policy(backend, option='mouse', value='on', timeout_s=timeout_s)
+    _apply_optional_server_policy(backend, option='set-clipboard', value='on', timeout_s=timeout_s)
+
+
+def _apply_optional_server_policy(backend, *, option: str, value: str, timeout_s: float | None = None) -> None:
+    try:
+        _tmux_run_ready(
+            backend,
+            ['set-option', '-g', option, value],
+            failure_message=f'failed to persist tmux {option} policy',
+            timeout_s=timeout_s,
+        )
+    except Exception:
+        return
 
 
 def create_session(

lib/ccbd/services/project_namespace_runtime/ensure_state.py

@@ -1,6 +1,6 @@
 from __future__ import annotations
 
-from .backend import find_window, kill_server, session_window_target, window_root_pane
+from .backend import ensure_server_policy, find_window, kill_server, session_window_target, window_root_pane
 from .ensure_context import rebuild_namespace_backend
 from .ensure_identity import apply_namespace_identity
 from .models import ProjectNamespace
@@ -65,6 +65,7 @@ def persist_refreshed_namespace(controller, context, *, timeout_s: float | None
         raise ValueError('persist_refreshed_namespace requires current state')
     control_window_name = str(current.control_window_name or context.desired_control_window_name)
     workspace_window_name = str(current.workspace_window_name or context.desired_workspace_window_name)
+    ensure_server_policy(context.backend, timeout_s=timeout_s)
     control_window = find_window(
         context.backend,
         session_name=context.desired_session_name,

lib/cli/services/runtime_launch_runtime/tmux_panes.py

@@ -102,6 +102,8 @@ def detached_pane(
 def prepare_detached_tmux_server(backend) -> None:
     best_effort_tmux_run(backend, ['start-server'])
     best_effort_tmux_run(backend, ['set-option', '-g', 'destroy-unattached', 'off'])
+    best_effort_tmux_run(backend, ['set-option', '-g', 'mouse', 'on'])
+    best_effort_tmux_run(backend, ['set-option', '-g', 'set-clipboard', 'on'])
 
 
 def best_effort_tmux_run(backend, argv: list[str]) -> None:

test/test_v2_project_namespace_backend.py

@@ -45,7 +45,7 @@ def _tmux_run(self, args, *, check=False, capture=False, timeout=None):
                 stdout='',
                 stderr='no server running on /tmp/ccb-runtime/test.sock\n',
             )
-        if key == ('set-option', '-g', 'destroy-unattached', 'off') and self.require_session_for_server_policy and not self.session_created:
+        if key[:2] == ('set-option', '-g') and self.require_session_for_server_policy and not self.session_created:
             return subprocess.CompletedProcess(
                 ['tmux', *key],
                 1,
@@ -106,6 +106,8 @@ def test_prepare_server_then_create_session_and_server_policy_retry_transient_tm
 
     assert backend.calls.count(('start-server',)) == 2
     assert backend.calls.count(('set-option', '-g', 'destroy-unattached', 'off')) == 2
+    assert backend.calls.count(('set-option', '-g', 'mouse', 'on')) == 1
+    assert backend.calls.count(('set-option', '-g', 'set-clipboard', 'on')) == 1
     assert backend.calls.count(
         (
             'new-session',
@@ -147,7 +149,13 @@ def test_prepare_server_does_not_require_server_policy_before_session_exists(mon
 
     assert backend.calls[0] == ('start-server',)
     assert ('set-option', '-g', 'destroy-unattached', 'off') not in backend.calls[:2]
-    assert backend.calls[-1] == ('set-option', '-g', 'destroy-unattached', 'off')
+    assert ('set-option', '-g', 'mouse', 'on') not in backend.calls[:2]
+    assert ('set-option', '-g', 'set-clipboard', 'on') not in backend.calls[:2]
+    assert backend.calls[-3:] == [
+        ('set-option', '-g', 'destroy-unattached', 'off'),
+        ('set-option', '-g', 'mouse', 'on'),
+        ('set-option', '-g', 'set-clipboard', 'on'),
+    ]
 
 
 def test_list_windows_retries_transient_tmux_failures(monkeypatch) -> None:
@@ -304,7 +312,11 @@ def test_ensure_server_policy_accepts_fast_probe_timeout(monkeypatch) -> None:
 
     ensure_server_policy(backend, timeout_s=0.0)
 
-    assert backend.calls == [('set-option', '-g', 'destroy-unattached', 'off')]
+    assert backend.calls == [
+        ('set-option', '-g', 'destroy-unattached', 'off'),
+        ('set-option', '-g', 'mouse', 'on'),
+        ('set-option', '-g', 'set-clipboard', 'on'),
+    ]
 
 
 def test_kill_window_accepts_fast_probe_timeout(monkeypatch) -> None: