fix(terminal): recover dropped keyCode 229 input

Android/GBoard-style keyboards fire keydown with keyCode 229 and, on some
paths, never mutate xterm's helper textarea. xterm has nothing to diff, so
it emits no data and the typed character is silently dropped: it never
reaches the PTY and never appears on screen.

terminal-keycode229-recovery.js is a standalone controller that re-emits
exactly those keys, and only once. xterm stays authoritative throughout:

- Only an explicit keyCode 229 keydown carrying a single printable key (or
  Enter) is eligible; Process/Unidentified/Dead, modifiers, AltGraph and a
  live composition are all left alone.
- The re-emit is scheduled from a microtask and then a zero-delay timer, so
  xterm's own textarea diff always gets the first opportunity; canonical
  data for the same key cancels the pending fallback.
- compositionstart and blur drop every pending candidate, so a real IME
  composition lifecycle is never second-guessed.
- After a recovery, one late canonical value attributed to that key token
  (via beforeinput/input on the helper textarea) is suppressed so the
  character cannot be delivered twice; the record expires after 250ms and
  an unattributed byte is never suppressed.

terminal-ui.js wires it at the two existing choke points — the custom key
handler and the onData registration, the latter now a named handler so the
recovery path can re-enter it — with both hooks wrapped so a failure in the
fallback can never break canonical input.

Unit coverage drives the module directly in a vm; the wiring itself is
covered end-to-end in the (browser-only) terminal-copy-shortcut suite.

src/web/public/index.html

@@ -3458,6 +3458,8 @@
   <script defer src="notification-manager.js"></script>
   <script defer src="keyboard-accessory.js"></script>
   <script defer src="input-cjk.js"></script>
+  <!-- Recovers Android/GBoard keydowns that report keyCode 229 without touching xterm's helper textarea. Must precede terminal-ui.js. -->
+  <script defer src="terminal-keycode229-recovery.js"></script>
   <!-- Hardened markdown HTML sanitizer (wires DOMPurify). Must precede app.js. -->
   <script defer src="sanitize-html.js"></script>
   <script defer src="app.js"></script>

src/web/public/terminal-keycode229-recovery.js

@@ -0,0 +1,227 @@
+/**
+ * Recover explicit keyCode 229 terminal input when a browser reports a key but
+ * never mutates xterm's helper textarea. xterm remains authoritative whenever
+ * it emits canonical data or the browser enters a real composition lifecycle.
+ */
+(function (global) {
+  'use strict';
+
+  const LATE_INPUT_WINDOW_MS = 250;
+  const MAX_RECOVERED_RECORDS = 32;
+
+  function explicitTerminalDataForEvent(event) {
+    if (!event || event.type !== 'keydown' || event.isComposing) return null;
+    if (event.ctrlKey || event.altKey || event.metaKey) return null;
+    try {
+      if (event.getModifierState?.('AltGraph')) return null;
+    } catch {
+      return null;
+    }
+
+    const key = event.key;
+    if (key === 'Enter') return '\r';
+    if (key === 'Process' || key === 'Unidentified' || key === 'Dead') return null;
+    if (typeof key !== 'string' || Array.from(key).length !== 1) return null;
+    const codePoint = key.codePointAt(0);
+    if (codePoint === undefined || codePoint < 32 || codePoint === 127) return null;
+    return key;
+  }
+
+  function terminalDataForEvent(event) {
+    if (event?.keyCode !== 229) return null;
+    return explicitTerminalDataForEvent(event);
+  }
+
+  function create(options) {
+    const textarea = options?.textarea;
+    const emitRecovered = options?.emitRecovered;
+    if (!textarea?.addEventListener || !textarea?.removeEventListener || typeof emitRecovered !== 'function') {
+      return null;
+    }
+
+    const enqueueMicrotask = options.queueMicrotask || global.queueMicrotask.bind(global);
+    const setTimer = options.setTimer || global.setTimeout.bind(global);
+    const clearTimer = options.clearTimer || global.clearTimeout.bind(global);
+    const now = options.now || (() => global.performance?.now?.() ?? Date.now());
+
+    let destroyed = false;
+    let keySequence = 0;
+    let activeKey = null;
+    let beforeInputClaim = null;
+    const pending = [];
+    const recovered = [];
+
+    function removePending(candidate) {
+      const index = pending.indexOf(candidate);
+      if (index !== -1) pending.splice(index, 1);
+      if (candidate.timer !== null) {
+        try {
+          clearTimer(candidate.timer);
+        } catch {}
+        candidate.timer = null;
+      }
+      candidate.active = false;
+    }
+
+    function cancelPending(predicate = () => true) {
+      for (const candidate of [...pending]) {
+        if (predicate(candidate)) removePending(candidate);
+      }
+    }
+
+    function pruneRecovered() {
+      const current = now();
+      for (let index = recovered.length - 1; index >= 0; index -= 1) {
+        if (recovered[index].expiresAt < current) recovered.splice(index, 1);
+      }
+    }
+
+    function handleKeyEvent(event) {
+      if (destroyed || event?.type !== 'keydown') return;
+      const record = {
+        sequence: ++keySequence,
+        data: explicitTerminalDataForEvent(event),
+        candidate: null,
+      };
+      activeKey = record;
+      const data = terminalDataForEvent(event);
+      const candidate = data === null ? null : { sequence: record.sequence, data, active: true, timer: null };
+      if (candidate) {
+        record.candidate = candidate;
+        pending.push(candidate);
+      }
+      try {
+        // The custom key handler runs before xterm's CompositionHelper. Queueing
+        // our timer from a microtask places it after xterm's own zero-delay
+        // textarea diff, while keeping the recovery delay to one browser task.
+        enqueueMicrotask(() => {
+          if (activeKey === record) activeKey = null;
+          if (destroyed || !candidate?.active) return;
+          try {
+            candidate.timer = setTimer(() => {
+              if (destroyed || !candidate.active) return;
+              removePending(candidate);
+              try {
+                emitRecovered(candidate.data);
+              } catch {
+                // No dedupe record is retained when delivery fails. A later
+                // canonical xterm value must remain free to pass through.
+                return;
+              }
+              pruneRecovered();
+              recovered.push({
+                sequence: candidate.sequence,
+                data: candidate.data,
+                expiresAt: now() + LATE_INPUT_WINDOW_MS,
+                claimedByInput: false,
+              });
+              if (recovered.length > MAX_RECOVERED_RECORDS) {
+                recovered.splice(0, recovered.length - MAX_RECOVERED_RECORDS);
+              }
+            }, 0);
+          } catch {
+            removePending(candidate);
+          }
+        });
+      } catch {
+        if (activeKey === record) activeKey = null;
+        if (candidate) removePending(candidate);
+      }
+    }
+
+    function claimCanonicalInput(data) {
+      if (activeKey?.data === data) {
+        if (activeKey.candidate?.active) removePending(activeKey.candidate);
+        return;
+      }
+      const matchingPending = pending.find((candidate) => candidate.active && candidate.data === data);
+      if (matchingPending) {
+        removePending(matchingPending);
+        return;
+      }
+      const matchingRecovery = recovered.find((record) => !record.claimedByInput && record.data === data);
+      if (matchingRecovery) matchingRecovery.claimedByInput = true;
+    }
+
+    function onCanonicalInput(event) {
+      if (destroyed) return;
+      const inputData = typeof event?.data === 'string' ? event.data : null;
+      if (inputData === null) return;
+      if (event.type === 'input' && beforeInputClaim?.data === inputData) {
+        beforeInputClaim = null;
+        return;
+      }
+      if (event.type === 'beforeinput') {
+        const claim = { data: inputData };
+        beforeInputClaim = claim;
+        try {
+          enqueueMicrotask(() => {
+            if (beforeInputClaim === claim) beforeInputClaim = null;
+          });
+        } catch {
+          beforeInputClaim = null;
+        }
+      }
+      claimCanonicalInput(inputData);
+    }
+
+    function resetForCompositionOrFocusLoss() {
+      if (destroyed) return;
+      keySequence += 1;
+      activeKey = null;
+      beforeInputClaim = null;
+      cancelPending();
+      recovered.splice(0);
+    }
+
+    function consumeTerminalData(data) {
+      if (destroyed) return false;
+      pruneRecovered();
+
+      if (activeKey?.data === data) {
+        if (activeKey.candidate?.active) removePending(activeKey.candidate);
+        return false;
+      }
+
+      const canonical = pending.find((candidate) => candidate.active && candidate.data === data);
+      if (canonical) {
+        removePending(canonical);
+        return false;
+      }
+
+      const duplicateIndex = recovered.findIndex((record) => record.data === data && record.claimedByInput);
+      if (duplicateIndex === -1) return false;
+      recovered.splice(duplicateIndex, 1);
+      return true;
+    }
+
+    function destroy() {
+      if (destroyed) return;
+      destroyed = true;
+      activeKey = null;
+      beforeInputClaim = null;
+      cancelPending();
+      recovered.splice(0);
+      try {
+        textarea.removeEventListener('beforeinput', onCanonicalInput, true);
+        textarea.removeEventListener('input', onCanonicalInput, true);
+        textarea.removeEventListener('compositionstart', resetForCompositionOrFocusLoss, true);
+        textarea.removeEventListener('blur', resetForCompositionOrFocusLoss, true);
+      } catch {}
+    }
+
+    try {
+      textarea.addEventListener('beforeinput', onCanonicalInput, true);
+      textarea.addEventListener('input', onCanonicalInput, true);
+      textarea.addEventListener('compositionstart', resetForCompositionOrFocusLoss, true);
+      textarea.addEventListener('blur', resetForCompositionOrFocusLoss, true);
+    } catch {
+      destroy();
+      return null;
+    }
+
+    return Object.freeze({ handleKeyEvent, consumeTerminalData, destroy });
+  }
+
+  global.CodemanKeyCode229Recovery = Object.freeze({ create, terminalDataForEvent });
+})(typeof window !== 'undefined' ? window : globalThis);

src/web/public/terminal-ui.js

@@ -232,12 +232,22 @@ Object.assign(CodemanApp.prototype, {
   // Terminal Setup — xterm.js config and input handling
   // ═══════════════════════════════════════════════════════════════
 
+  _destroyKeyCode229Recovery() {
+    try {
+      this._keyCode229Recovery?.destroy?.();
+    } catch {
+      // Recovery is optional; terminal replacement must continue.
+    }
+    this._keyCode229Recovery = null;
+  },
+
   initTerminal() {
     // Load scrollback setting from localStorage, treating DEFAULT_SCROLLBACK as a floor
     // so users who picked up the previous (smaller) default get the new minimum on upgrade.
     const stored = parseInt(localStorage.getItem('codeman-scrollback'));
     const scrollback = Number.isFinite(stored) && stored > 0 ? Math.max(stored, DEFAULT_SCROLLBACK) : DEFAULT_SCROLLBACK;
 
+    this._destroyKeyCode229Recovery();
     this.terminal = new Terminal({
       theme: { ...window.codemanCurrentXtermTheme() },
       fontFamily: window.CodemanTerminalFont.resolve(this.loadAppSettingsFromStorage?.().terminalFontFamily),
@@ -292,6 +302,11 @@ Object.assign(CodemanApp.prototype, {
     // punctuation; returning false here would stop xterm before it can diff
     // the helper textarea and emit the committed Unicode text.
     this.terminal.attachCustomKeyEventHandler((ev) => {
+      try {
+        this._keyCode229Recovery?.handleKeyEvent?.(ev);
+      } catch {
+        // The fallback must never interfere with xterm's canonical handler.
+      }
       if (ev.isComposing || ev.key === 'Process' || ev.keyCode === 229) return true;
 
       // Let the app's Alt/Option session-nav and Command Palette shortcuts reach the document keydown handler
@@ -1026,7 +1041,14 @@ Object.assign(CodemanApp.prototype, {
     // mobile connections.  The overlay + localStorage persistence ensure input
     // survives tab switches and reconnects.
 
-    this.terminal.onData((data) => {
+    const handleTerminalData = (data, { recovered = false } = {}) => {
+      if (!recovered) {
+        try {
+          if (this._keyCode229Recovery?.consumeTerminalData?.(data)) return;
+        } catch {
+          // A broken dedupe guard must fail open to canonical xterm data.
+        }
+      }
       // Mouse SGR reports (tap-to-position) are NOT IME input — they must reach
       // the PTY even while the CJK input field owns focus. Without this exception
       // tapping to move the cursor silently does nothing whenever Chinese input
@@ -1348,7 +1370,21 @@ Object.assign(CodemanApp.prototype, {
           }
         }
       }
-    });
+    };
+
+    // Android/GBoard fires keydown with keyCode 229 and, on some paths, never
+    // mutates xterm's helper textarea, so the character is silently dropped.
+    // The controller re-emits exactly those keys, and only after xterm has had
+    // its own chance to produce the canonical data.
+    try {
+      this._keyCode229Recovery = window.CodemanKeyCode229Recovery?.create?.({
+        textarea: this.terminal.textarea,
+        emitRecovered: (data) => handleTerminalData(data, { recovered: true }),
+      });
+    } catch {
+      this._keyCode229Recovery = null;
+    }
+    this.terminal.onData((data) => handleTerminalData(data));
   },
 
   /**