@blockrun/runcode 2.5.7 → 2.5.9

package/dist/agent/context.d.ts

@@ -4,5 +4,8 @@
  */
 /**
  * Build the full system instructions array for a session.
+ * Result is memoized per workingDir for the process lifetime.
  */
 export declare function assembleInstructions(workingDir: string): string[];
+/** Invalidate cache for a workingDir (call after /clear or session reset). */
+export declare function invalidateInstructionCache(workingDir: string): void;

package/dist/agent/context.js

@@ -53,10 +53,17 @@ The user can type these shortcuts: /commit, /review, /test, /fix, /debug, /expla
 /log, /branch, /stash, /plan, /ultraplan, /execute, /compact, /retry, /sessions, /resume,
 /tasks, /context, /doctor, /tokens, /model, /cost, /dump, /ultrathink [query], /clear,
 /help, /exit.`;
+// Cache assembled instructions per workingDir — avoids re-running git commands
+// when sub-agents are spawned (common in parallel tool use patterns).
+const _instructionCache = new Map();
 /**
  * Build the full system instructions array for a session.
+ * Result is memoized per workingDir for the process lifetime.
  */
 export function assembleInstructions(workingDir) {
+    const cached = _instructionCache.get(workingDir);
+    if (cached)
+        return cached;
     const parts = [BASE_INSTRUCTIONS];
     // Read RUNCODE.md or CLAUDE.md from the project
     const projectConfig = readProjectConfig(workingDir);
@@ -70,8 +77,13 @@ export function assembleInstructions(workingDir) {
     if (gitInfo) {
         parts.push(`# Git Context\n\n${gitInfo}`);
     }
+    _instructionCache.set(workingDir, parts);
     return parts;
 }
+/** Invalidate cache for a workingDir (call after /clear or session reset). */
+export function invalidateInstructionCache(workingDir) {
+    _instructionCache.delete(workingDir);
+}
 // ─── Project Config ────────────────────────────────────────────────────────
 /**
  * Look for RUNCODE.md, then CLAUDE.md in the working directory and parents.
@@ -114,6 +126,8 @@ function buildEnvironmentSection(workingDir) {
 }
 // ─── Git Context ───────────────────────────────────────────────────────────
 const GIT_TIMEOUT_MS = 5_000;
+// Max chars for git log output — long commit messages can bloat the system prompt
+const MAX_GIT_LOG_CHARS = 2_000;
 function getGitContext(workingDir) {
     try {
         const isGit = execSync('git rev-parse --is-inside-work-tree', {
@@ -154,15 +168,18 @@ function getGitContext(workingDir) {
             }
         }
         catch { /* ignore */ }
-        // Recent commits (last 5)
+        // Recent commits (last 5) — capped to prevent huge messages bloating context
         try {
-            const log = execSync('git log --oneline -5', {
+            let log = execSync('git log --oneline -5', {
                 cwd: workingDir,
                 encoding: 'utf-8',
                 stdio: ['pipe', 'pipe', 'pipe'],
                 timeout: GIT_TIMEOUT_MS,
             }).trim();
             if (log) {
+                if (log.length > MAX_GIT_LOG_CHARS) {
+                    log = log.slice(0, MAX_GIT_LOG_CHARS) + '\n... (truncated)';
+                }
                 lines.push(`\nRecent commits:\n${log}`);
             }
         }

package/dist/agent/loop.js

@@ -33,7 +33,7 @@ export async function interactiveSession(config, getUserInput, onEvent, onAbortR
     const toolDefs = config.capabilities.map((c) => c.spec);
     const maxTurns = config.maxTurns ?? 100;
     const workDir = config.workingDir ?? process.cwd();
-    const permissions = new PermissionManager(config.permissionMode ?? 'default');
+    const permissions = new PermissionManager(config.permissionMode ?? 'default', config.permissionPromptFn);
     const history = [];
     let lastUserInput = ''; // For /retry
     // Session persistence

package/dist/agent/permissions.d.ts

@@ -17,16 +17,19 @@ export declare class PermissionManager {
     private rules;
     private mode;
     private sessionAllowed;
-    constructor(mode?: PermissionMode);
+    private promptFn?;
+    constructor(mode?: PermissionMode, promptFn?: (toolName: string, description: string) => Promise<'yes' | 'no' | 'always'>);
     /**
      * Check if a tool can be used. Returns the decision.
      */
     check(toolName: string, input: Record<string, unknown>): Promise<PermissionDecision>;
     /**
      * Prompt the user interactively for permission.
+     * Uses injected promptFn (Ink UI) when available, falls back to readline.
+     * pendingCount: how many more operations of this type are waiting (including this one).
      * Returns true if allowed, false if denied.
      */
-    promptUser(toolName: string, input: Record<string, unknown>): Promise<boolean>;
+    promptUser(toolName: string, input: Record<string, unknown>, pendingCount?: number): Promise<boolean>;
     private loadRules;
     private matchesRule;
     private getPrimaryInputValue;

package/dist/agent/permissions.js

@@ -20,9 +20,11 @@ export class PermissionManager {
     rules;
     mode;
     sessionAllowed = new Set(); // "always allow" for this session
-    constructor(mode = 'default') {
+    promptFn;
+    constructor(mode = 'default', promptFn) {
         this.mode = mode;
         this.rules = this.loadRules();
+        this.promptFn = promptFn;
     }
     /**
      * Check if a tool can be used. Returns the decision.
@@ -71,14 +73,34 @@ export class PermissionManager {
     }
     /**
      * Prompt the user interactively for permission.
+     * Uses injected promptFn (Ink UI) when available, falls back to readline.
+     * pendingCount: how many more operations of this type are waiting (including this one).
      * Returns true if allowed, false if denied.
      */
-    async promptUser(toolName, input) {
+    async promptUser(toolName, input, pendingCount = 1) {
         const description = this.describeAction(toolName, input);
+        // Append pending-count hint so user knows to press [a] to skip all
+        const hint = pendingCount > 1
+            ? `${description}\n  │ \x1b[33m${pendingCount} pending — press [a] to allow all\x1b[0m`
+            : description;
+        // Ink UI path: use injected prompt function to avoid stdin conflict.
+        // Ink owns stdin in raw mode; a second readline would get EOF immediately.
+        if (this.promptFn) {
+            const result = await this.promptFn(toolName, hint);
+            if (result === 'always') {
+                this.sessionAllowed.add(toolName);
+                return true;
+            }
+            return result === 'yes';
+        }
+        // Readline fallback (basic terminal / piped mode)
         console.error('');
         console.error(chalk.yellow('  ╭─ Permission required ─────────────────'));
         console.error(chalk.yellow(`  │ ${toolName}`));
         console.error(chalk.dim(`  │ ${description}`));
+        if (pendingCount > 1) {
+            console.error(chalk.yellow(`  │ ${pendingCount} pending — press [a] to allow all`));
+        }
         console.error(chalk.yellow('  ╰─────────────────────────────────────'));
         const answer = await askQuestion(chalk.bold('  Allow? ') + chalk.dim('[Y/n/a]lways: '));
         const normalized = answer.trim().toLowerCase();

package/dist/agent/streaming-executor.js

@@ -41,6 +41,15 @@ export class StreamingExecutor {
         const alreadyStarted = new Set(this.pending.map(p => p.invocation.id));
         const pendingSnapshot = [...this.pending];
         this.pending = []; // Clear immediately so errors don't leave stale state
+        // Pre-count how many sequential invocations of each tool type are pending.
+        // Passed to promptUser so the dialog can show "N pending — press [a] to allow all".
+        const pendingCounts = new Map();
+        for (const inv of allInvocations) {
+            if (!alreadyStarted.has(inv.id)) {
+                pendingCounts.set(inv.name, (pendingCounts.get(inv.name) || 0) + 1);
+            }
+        }
+        const remainingCounts = new Map(pendingCounts);
         try {
             // Wait for concurrent results that were started during streaming
             for (const p of pendingSnapshot) {
@@ -51,8 +60,10 @@ export class StreamingExecutor {
             for (const inv of allInvocations) {
                 if (alreadyStarted.has(inv.id))
                     continue;
+                const remaining = remainingCounts.get(inv.name) ?? 1;
+                remainingCounts.set(inv.name, remaining - 1);
                 this.onStart(inv.id, inv.name);
-                const result = await this.executeWithPermissions(inv);
+                const result = await this.executeWithPermissions(inv, remaining);
                 results.push([inv, result]);
             }
         }
@@ -62,21 +73,21 @@ export class StreamingExecutor {
         }
         return results;
     }
-    async executeWithPermissions(invocation) {
+    async executeWithPermissions(invocation, pendingCount = 1) {
         // Permission check
         if (this.permissions) {
             const decision = await this.permissions.check(invocation.name, invocation.input);
             if (decision.behavior === 'deny') {
                 return {
-                    output: `Permission denied for ${invocation.name}: ${decision.reason || 'denied by policy'}`,
+                    output: `Permission denied for ${invocation.name}: ${decision.reason || 'denied by policy'}. Do not retry — explain to the user what you were trying to do and ask how they'd like to proceed.`,
                     isError: true,
                 };
             }
             if (decision.behavior === 'ask') {
-                const allowed = await this.permissions.promptUser(invocation.name, invocation.input);
+                const allowed = await this.permissions.promptUser(invocation.name, invocation.input, pendingCount);
                 if (!allowed) {
                     return {
-                        output: `User denied permission for ${invocation.name}`,
+                        output: `User denied permission for ${invocation.name}. Do not retry — ask the user what they'd like to do instead.`,
                         isError: true,
                     };
                 }

package/dist/agent/types.d.ts

@@ -103,4 +103,10 @@ export interface AgentConfig {
     debug?: boolean;
     /** Ultrathink mode: inject deep-reasoning instruction into every prompt */
     ultrathink?: boolean;
+    /**
+     * Permission prompt function — injected by Ink UI to avoid stdin conflict.
+     * Replaces the readline-based askQuestion() when running in interactive mode.
+     * Returns 'yes' | 'no' | 'always' (always = allow for rest of session).
+     */
+    permissionPromptFn?: (toolName: string, description: string) => Promise<'yes' | 'no' | 'always'>;
 }

package/dist/commands/start.js

@@ -128,7 +128,7 @@ export async function startCommand(options) {
         permissionMode: (options.trust || !process.stdin.isTTY) ? 'trust' : 'default',
         debug: options.debug,
     };
-    // Use ink UI if TTY, fallback to basic readline for piped input
+    // Use Ink UI if TTY, fallback to basic readline for piped input
     if (process.stdin.isTTY) {
         await runWithInkUI(agentConfig, model, workDir, version, walletInfo, (cb) => {
             onBalanceFetched = cb;
@@ -151,6 +151,10 @@ async function runWithInkUI(agentConfig, model, workDir, version, walletInfo, on
             agentConfig.model = newModel;
         },
     });
+    // Wire permission prompts through Ink UI to avoid stdin/readline conflict.
+    // Ink owns stdin in raw mode; the old readline-based askQuestion() got EOF
+    // immediately and auto-denied every permission. Now y/n/a goes through useInput.
+    agentConfig.permissionPromptFn = (toolName, description) => ui.requestPermission(toolName, description);
     // Wire up background balance fetch to UI
     onBalanceReady?.((bal) => ui.updateBalance(bal));
     try {

package/dist/tools/edit.js

@@ -3,6 +3,16 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
+import { partiallyReadFiles } from './read.js';
+/**
+ * Normalize curly/smart quotes to straight quotes.
+ * Claude Code does this to handle API-sanitized strings and editor paste artifacts.
+ */
+function normalizeQuotes(str) {
+    return str
+        .replace(/[\u201C\u201D]/g, '"') // " " → "
+        .replace(/[\u2018\u2019]/g, "'"); // ' ' → '
+}
 async function execute(input, ctx) {
     const { file_path: filePath, old_string: oldStr, new_string: newStr, replace_all: replaceAll } = input;
     if (!filePath) {
@@ -18,12 +28,25 @@ async function execute(input, ctx) {
         return { output: 'Error: old_string and new_string are identical', isError: true };
     }
     const resolved = path.isAbsolute(filePath) ? filePath : path.resolve(ctx.workingDir, filePath);
+    // Warn if the file was only partially read — editing without full context risks mistakes
+    const isPartial = partiallyReadFiles.has(resolved);
     try {
         if (!fs.existsSync(resolved)) {
             return { output: `Error: file not found: ${resolved}`, isError: true };
         }
         const content = fs.readFileSync(resolved, 'utf-8');
+        // Try exact match first, then quote-normalized fallback
+        let effectiveOldStr = oldStr;
         if (!content.includes(oldStr)) {
+            const normalized = normalizeQuotes(oldStr);
+            const contentNormalized = normalizeQuotes(content);
+            if (normalized !== oldStr && contentNormalized.includes(normalized)) {
+                // Find the original text in content that corresponds to the normalized match
+                const idx = contentNormalized.indexOf(normalized);
+                effectiveOldStr = content.slice(idx, idx + normalized.length);
+            }
+        }
+        if (!content.includes(effectiveOldStr)) {
             // Find lines containing fragments of old_string for helpful context
             const lines = content.split('\n');
             const searchTerms = oldStr.split('\n').map(l => l.trim()).filter(l => l.length > 3);
@@ -52,20 +75,17 @@ async function execute(input, ctx) {
         let updated;
         let matchCount;
         if (replaceAll) {
-            // Count occurrences
-            matchCount = content.split(oldStr).length - 1;
-            updated = content.split(oldStr).join(newStr);
+            matchCount = content.split(effectiveOldStr).length - 1;
+            updated = content.split(effectiveOldStr).join(newStr);
         }
         else {
-            // Ensure uniqueness for single replacement
-            const firstIdx = content.indexOf(oldStr);
-            const secondIdx = content.indexOf(oldStr, firstIdx + 1);
+            const firstIdx = content.indexOf(effectiveOldStr);
+            const secondIdx = content.indexOf(effectiveOldStr, firstIdx + 1);
             if (secondIdx !== -1) {
-                // Multiple matches — show where they are
                 const positions = [];
                 let searchFrom = 0;
                 while (true) {
-                    const idx = content.indexOf(oldStr, searchFrom);
+                    const idx = content.indexOf(effectiveOldStr, searchFrom);
                     if (idx === -1)
                         break;
                     const lineNum = content.slice(0, idx).split('\n').length;
@@ -79,11 +99,13 @@ async function execute(input, ctx) {
                 };
             }
             matchCount = 1;
-            updated = content.slice(0, firstIdx) + newStr + content.slice(firstIdx + oldStr.length);
+            updated = content.slice(0, firstIdx) + newStr + content.slice(firstIdx + effectiveOldStr.length);
         }
         fs.writeFileSync(resolved, updated, 'utf-8');
+        // File has been modified — remove from partial-read tracking so next read is fresh
+        partiallyReadFiles.delete(resolved);
         // Build a concise diff preview
-        const oldLines = oldStr.split('\n');
+        const oldLines = effectiveOldStr.split('\n');
         const newLines = newStr.split('\n');
         let diffPreview = '';
         if (oldLines.length <= 5 && newLines.length <= 5) {
@@ -94,8 +116,11 @@ async function execute(input, ctx) {
         else {
             diffPreview = ` (${oldLines.length} lines → ${newLines.length} lines)`;
         }
+        const partialWarning = isPartial
+            ? '\nNote: file was only partially read before this edit.'
+            : '';
         return {
-            output: `Updated ${resolved} — ${matchCount} replacement${matchCount > 1 ? 's' : ''} made.${diffPreview}`,
+            output: `Updated ${resolved} — ${matchCount} replacement${matchCount > 1 ? 's' : ''} made.${diffPreview}${partialWarning}`,
         };
     }
     catch (err) {

package/dist/tools/read.d.ts

@@ -2,4 +2,10 @@
  * Read capability — reads files with line numbers.
  */
 import type { CapabilityHandler } from '../agent/types.js';
+/**
+ * Tracks files that were only partially read (offset or limit applied).
+ * Edit tool uses this to warn when editing without full context.
+ * Exported so edit.ts can check and clear entries.
+ */
+export declare const partiallyReadFiles: Set<string>;
 export declare const readCapability: CapabilityHandler;

package/dist/tools/read.js

@@ -3,6 +3,12 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
+/**
+ * Tracks files that were only partially read (offset or limit applied).
+ * Edit tool uses this to warn when editing without full context.
+ * Exported so edit.ts can check and clear entries.
+ */
+export const partiallyReadFiles = new Set();
 async function execute(input, ctx) {
     const { file_path: filePath, offset, limit } = input;
     if (!filePath) {
@@ -37,6 +43,15 @@ async function execute(input, ctx) {
         const maxLines = limit ?? 2000;
         const endLine = Math.min(allLines.length, startLine + maxLines);
         const slice = allLines.slice(startLine, endLine);
+        // Track partial reads — file was not read from the beginning or was truncated
+        const isPartial = startLine > 0 || endLine < allLines.length;
+        if (isPartial) {
+            partiallyReadFiles.add(resolved);
+        }
+        else {
+            // Full read — clear any stale partial flag
+            partiallyReadFiles.delete(resolved);
+        }
         // Format with line numbers (cat -n style)
         const numbered = slice.map((line, i) => `${startLine + i + 1}\t${line}`);
         let result = numbered.join('\n');

package/dist/tools/webfetch.js

@@ -3,6 +3,32 @@
  */
 import { VERSION } from '../config.js';
 const MAX_BODY_BYTES = 256 * 1024; // 256KB
+// ─── Session cache ──────────────────────────────────────────────────────────
+// Avoids re-fetching the same URL within a session (common in research tasks).
+// 15-min TTL, max 50 entries.
+const CACHE_TTL_MS = 15 * 60 * 1000;
+const MAX_CACHE_ENTRIES = 50;
+const fetchCache = new Map();
+function getCached(url) {
+    const entry = fetchCache.get(url);
+    if (!entry)
+        return null;
+    if (Date.now() > entry.expiresAt) {
+        fetchCache.delete(url);
+        return null;
+    }
+    return entry.output;
+}
+function setCached(url, output) {
+    // Evict oldest entry if at capacity
+    if (fetchCache.size >= MAX_CACHE_ENTRIES) {
+        const firstKey = fetchCache.keys().next().value;
+        if (firstKey)
+            fetchCache.delete(firstKey);
+    }
+    fetchCache.set(url, { output, expiresAt: Date.now() + CACHE_TTL_MS });
+}
+// ─── Execute ────────────────────────────────────────────────────────────────
 async function execute(input, _ctx) {
     const { url, max_length } = input;
     if (!url) {
@@ -19,6 +45,11 @@ async function execute(input, _ctx) {
     if (!['http:', 'https:'].includes(parsed.protocol)) {
         return { output: `Error: only http/https URLs are supported`, isError: true };
     }
+    // Check cache first
+    const cached = getCached(url);
+    if (cached) {
+        return { output: cached + '\n\n(cached)' };
+    }
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 30_000);
     try {
@@ -62,8 +93,8 @@ async function execute(input, _ctx) {
         // Format response based on content type
         if (contentType.includes('json')) {
             try {
-                const parsed = JSON.parse(body);
-                body = JSON.stringify(parsed, null, 2).slice(0, maxLen);
+                const parsedJson = JSON.parse(body);
+                body = JSON.stringify(parsedJson, null, 2).slice(0, maxLen);
             }
             catch { /* leave as-is if not valid JSON */ }
         }
@@ -74,6 +105,8 @@ async function execute(input, _ctx) {
         if (totalBytes >= maxLen) {
             output += '\n\n... (content truncated)';
         }
+        // Cache successful responses
+        setCached(url, output);
         return { output };
     }
     catch (err) {
@@ -118,7 +151,7 @@ function stripHtml(html) {
 export const webFetchCapability = {
     spec: {
         name: 'WebFetch',
-        description: 'Fetch a web page and return its content. HTML tags are stripped for readability.',
+        description: 'Fetch a web page and return its content. HTML tags are stripped for readability. Results are cached for 15 minutes.',
         input_schema: {
             type: 'object',
             properties: {

package/dist/ui/app.d.ts

@@ -9,6 +9,7 @@ export interface InkUIHandle {
     waitForInput: () => Promise<string | null>;
     onAbort: (cb: () => void) => void;
     cleanup: () => void;
+    requestPermission: (toolName: string, description: string) => Promise<'yes' | 'no' | 'always'>;
 }
 export declare function launchInkUI(opts: {
     model: string;

package/dist/ui/app.js

@@ -4,7 +4,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * Real-time streaming, thinking animation, tool progress, slash commands.
  */
 import { useState, useEffect, useCallback } from 'react';
-import { render, Box, Text, useApp, useInput, useStdout } from 'ink';
+import { render, Static, Box, Text, useApp, useInput, useStdout } from 'ink';
 import Spinner from 'ink-spinner';
 import TextInput from 'ink-text-input';
 import { resolveModel } from './model-picker.js';
@@ -41,6 +41,8 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
     const [thinking, setThinking] = useState(false);
     const [waiting, setWaiting] = useState(false);
     const [tools, setTools] = useState(new Map());
+    // Completed tool results committed to Static (permanent scrollback — no re-render artifacts)
+    const [completedTools, setCompletedTools] = useState([]);
     const [currentModel, setCurrentModel] = useState(initialModel || PICKER_MODELS[0].id);
     const [ready, setReady] = useState(!startWithPicker);
     const [mode, setMode] = useState(startWithPicker ? 'model-picker' : 'input');
@@ -55,11 +57,34 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
     const [lastPrompt, setLastPrompt] = useState('');
     const [inputHistory, setInputHistory] = useState([]);
     const [historyIdx, setHistoryIdx] = useState(-1);
+    const [permissionRequest, setPermissionRequest] = useState(null);
+    // Permission dialog key handler — captures y/n/a when dialog is visible.
+    // Must be registered before other handlers so it takes priority.
+    useInput((ch, _key) => {
+        if (!permissionRequest)
+            return;
+        const c = ch.toLowerCase();
+        if (c === 'y') {
+            const r = permissionRequest.resolve;
+            setPermissionRequest(null);
+            r('yes');
+        }
+        else if (c === 'n') {
+            const r = permissionRequest.resolve;
+            setPermissionRequest(null);
+            r('no');
+        }
+        else if (c === 'a') {
+            const r = permissionRequest.resolve;
+            setPermissionRequest(null);
+            r('always');
+        }
+    }, { isActive: !!permissionRequest });
     // Key handler for picker + esc + abort
     const isPickerOrEsc = mode === 'model-picker' || (mode === 'input' && ready && !input) || !ready;
     useInput((ch, key) => {
-        // Escape during generation → abort current turn
-        if (key.escape && !ready) {
+        // Escape during generation → abort current turn (skip if permission dialog open)
+        if (key.escape && !ready && !permissionRequest) {
             onAbort();
             setStatusMsg('Aborted');
             setReady(true);
@@ -212,6 +237,7 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
         setThinking(false);
         setThinkingText('');
         setTools(new Map());
+        setCompletedTools([]);
         setReady(false);
         setWaiting(true);
         setStatusMsg('');
@@ -220,10 +246,15 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
         setTurnTokens({ input: 0, output: 0 });
         onSubmit(trimmed);
     }, [currentModel, totalCost, onSubmit, onModelChange, onAbort, onExit, exit, lastPrompt, inputHistory]);
-    // Expose event handler + balance updater
+    // Expose event handler, balance updater, and permission bridge
     useEffect(() => {
         globalThis.__runcode_ui = {
             updateBalance: (bal) => setBalance(bal),
+            requestPermission: (toolName, description) => {
+                return new Promise((resolve) => {
+                    setPermissionRequest({ toolName, description, resolve });
+                });
+            },
             handleEvent: (event) => {
                 switch (event.kind) {
                     case 'text_delta':
@@ -251,21 +282,27 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
                             return next;
                         });
                         break;
-                    case 'capability_done':
+                    case 'capability_done': {
                         setTools(prev => {
                             const next = new Map(prev);
                             const t = next.get(event.id);
                             if (t) {
-                                next.set(event.id, {
-                                    ...t, done: true,
+                                const completed = {
+                                    ...t,
+                                    key: event.id,
+                                    done: true,
                                     error: !!event.result.isError,
                                     preview: event.result.output.replace(/\n/g, ' ').slice(0, 200),
                                     elapsed: Date.now() - t.startTime,
-                                });
+                                };
+                                // Move to Static (permanent scrollback) — prevents re-render artifacts
+                                setCompletedTools(prev2 => [...prev2, completed]);
+                                next.delete(event.id);
                             }
                             return next;
                         });
                         break;
+                    }
                     case 'usage':
                         setCurrentModel(event.model);
                         setTurnTokens(prev => ({
@@ -295,9 +332,9 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
                 }), _jsx(Text, { children: " " })] }));
     }
     // ── Normal Mode ──
-    return (_jsxs(Box, { flexDirection: "column", children: [statusMsg && (_jsx(Box, { marginLeft: 2, children: _jsx(Text, { color: "green", children: statusMsg }) })), showHelp && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, marginTop: 1, marginBottom: 1, children: [_jsx(Text, { bold: true, children: "Commands" }), _jsx(Text, { children: " " }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/model" }), " [name]  Switch model (picker if no name)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/wallet" }), "        Show wallet address & balance"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/cost" }), "          Session cost & savings"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/retry" }), "         Retry the last prompt"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/compact" }), "       Compress conversation history"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Coding \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/test" }), "          Run tests"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/fix" }), "           Fix last error"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/review" }), "        Code review"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/explain" }), " file  Explain code"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/search" }), " query  Search codebase"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/refactor" }), " desc Refactor code"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/scaffold" }), " desc Generate boilerplate"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Git \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/commit" }), "        Commit changes"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/push" }), "          Push to remote"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/pr" }), "            Create pull request"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/status" }), "        Git status"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/diff" }), "          Git diff"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/log" }), "           Git log"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/branch" }), " [name] Branches"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/stash" }), "         Stash changes"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/undo" }), "          Undo last commit"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Analysis \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/security" }), "      Security audit"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/lint" }), "          Quality check"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/optimize" }), "      Performance check"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/todo" }), "          Find TODOs"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/deps" }), "          Dependencies"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/clean" }), "         Dead code removal"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/context" }), "       Session info (model, tokens, mode)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/plan" }), "          Enter plan mode (read-only tools)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/execute" }), "       Exit plan mode (enable all tools)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/sessions" }), "      List saved sessions"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/resume" }), " id     Resume a saved session"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/clear" }), "         Clear conversation display"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/doctor" }), "        Diagnose setup issues"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/help" }), "          This help"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/exit" }), "          Quit"] }), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "  Shortcuts: sonnet, opus, gpt, gemini, deepseek, flash, free, r1, o4, nano, mini, haiku" })] })), showWallet && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, marginTop: 1, marginBottom: 1, children: [_jsx(Text, { bold: true, children: "Wallet" }), _jsx(Text, { children: " " }), _jsxs(Text, { children: ["  Chain:   ", _jsx(Text, { color: "magenta", children: chain })] }), _jsxs(Text, { children: ["  Address: ", _jsx(Text, { color: "cyan", children: walletAddress })] }), _jsxs(Text, { children: ["  Balance: ", _jsx(Text, { color: "green", children: balance })] })] })), Array.from(tools.entries()).map(([id, tool]) => (_jsx(Box, { marginLeft: 1, children: tool.done ? (tool.error
-                    ? _jsxs(Text, { color: "red", children: ["  \u2717 ", tool.name, " ", _jsxs(Text, { dimColor: true, children: [tool.elapsed, "ms"] })] })
-                    : _jsxs(Text, { color: "green", children: ["  \u2713 ", tool.name, " ", _jsxs(Text, { dimColor: true, children: [tool.elapsed, "ms \u2014 ", tool.preview.slice(0, 200), tool.preview.length > 200 ? '...' : ''] })] })) : (_jsxs(Text, { color: "cyan", children: ["  ", _jsx(Spinner, { type: "dots" }), " ", tool.name, "... ", _jsx(Text, { dimColor: true, children: (() => { const s = Math.round((Date.now() - tool.startTime) / 1000); return s > 0 ? `${s}s` : ''; })() })] })) }, id))), thinking && (_jsxs(Box, { flexDirection: "column", marginLeft: 1, children: [_jsxs(Text, { color: "magenta", children: ["  ", _jsx(Spinner, { type: "dots" }), " thinking..."] }), thinkingText && (_jsxs(Text, { dimColor: true, wrap: "truncate-end", children: ["  ", thinkingText.split('\n').pop()?.slice(0, 80)] }))] })), waiting && !thinking && tools.size === 0 && (_jsx(Box, { marginLeft: 1, children: _jsxs(Text, { color: "yellow", children: ["  ", _jsx(Spinner, { type: "dots" }), " ", _jsx(Text, { dimColor: true, children: currentModel })] }) })), streamText && (_jsx(Box, { marginTop: 0, marginBottom: 0, children: _jsx(Text, { children: streamText }) })), ready && (turnTokens.input > 0 || turnTokens.output > 0) && streamText && (_jsx(Box, { marginLeft: 1, marginTop: 0, children: _jsxs(Text, { dimColor: true, children: [turnTokens.input.toLocaleString(), " in / ", turnTokens.output.toLocaleString(), " out", totalCost > 0 ? `  ·  $${totalCost.toFixed(4)} session` : ''] }) })), ready && (_jsx(InputBox, { input: input, setInput: setInput, onSubmit: handleSubmit, model: currentModel, balance: balance, focused: mode === 'input' }))] }));
+    return (_jsxs(Box, { flexDirection: "column", children: [statusMsg && (_jsx(Box, { marginLeft: 2, children: _jsx(Text, { color: "green", children: statusMsg }) })), showHelp && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, marginTop: 1, marginBottom: 1, children: [_jsx(Text, { bold: true, children: "Commands" }), _jsx(Text, { children: " " }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/model" }), " [name]  Switch model (picker if no name)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/wallet" }), "        Show wallet address & balance"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/cost" }), "          Session cost & savings"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/retry" }), "         Retry the last prompt"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/compact" }), "       Compress conversation history"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Coding \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/test" }), "          Run tests"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/fix" }), "           Fix last error"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/review" }), "        Code review"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/explain" }), " file  Explain code"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/search" }), " query  Search codebase"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/refactor" }), " desc Refactor code"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/scaffold" }), " desc Generate boilerplate"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Git \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/commit" }), "        Commit changes"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/push" }), "          Push to remote"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/pr" }), "            Create pull request"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/status" }), "        Git status"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/diff" }), "          Git diff"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/log" }), "           Git log"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/branch" }), " [name] Branches"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/stash" }), "         Stash changes"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/undo" }), "          Undo last commit"] }), _jsx(Text, { dimColor: true, children: "  \u2500\u2500 Analysis \u2500\u2500" }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/security" }), "      Security audit"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/lint" }), "          Quality check"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/optimize" }), "      Performance check"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/todo" }), "          Find TODOs"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/deps" }), "          Dependencies"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/clean" }), "         Dead code removal"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/context" }), "       Session info (model, tokens, mode)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/plan" }), "          Enter plan mode (read-only tools)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/execute" }), "       Exit plan mode (enable all tools)"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/sessions" }), "      List saved sessions"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/resume" }), " id     Resume a saved session"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/clear" }), "         Clear conversation display"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/doctor" }), "        Diagnose setup issues"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/help" }), "          This help"] }), _jsxs(Text, { children: ["  ", _jsx(Text, { color: "cyan", children: "/exit" }), "          Quit"] }), _jsx(Text, { children: " " }), _jsx(Text, { dimColor: true, children: "  Shortcuts: sonnet, opus, gpt, gemini, deepseek, flash, free, r1, o4, nano, mini, haiku" })] })), showWallet && (_jsxs(Box, { flexDirection: "column", marginLeft: 2, marginTop: 1, marginBottom: 1, children: [_jsx(Text, { bold: true, children: "Wallet" }), _jsx(Text, { children: " " }), _jsxs(Text, { children: ["  Chain:   ", _jsx(Text, { color: "magenta", children: chain })] }), _jsxs(Text, { children: ["  Address: ", _jsx(Text, { color: "cyan", children: walletAddress })] }), _jsxs(Text, { children: ["  Balance: ", _jsx(Text, { color: "green", children: balance })] })] })), _jsx(Static, { items: completedTools, children: (tool) => (_jsx(Box, { marginLeft: 1, children: tool.error
+                        ? _jsxs(Text, { color: "red", children: ["  \u2717 ", tool.name, " ", _jsxs(Text, { dimColor: true, children: [tool.elapsed, "ms"] })] })
+                        : _jsxs(Text, { color: "green", children: ["  \u2713 ", tool.name, " ", _jsxs(Text, { dimColor: true, children: [tool.elapsed, "ms \u2014 ", tool.preview.slice(0, 120), tool.preview.length > 120 ? '...' : ''] })] }) }, tool.key)) }), permissionRequest && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 1, children: [_jsx(Text, { color: "yellow", children: "  \u256D\u2500 Permission required \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Text, { color: "yellow", children: ["  \u2502 ", _jsx(Text, { bold: true, children: permissionRequest.toolName })] }), permissionRequest.description.split('\n').map((line, i) => (_jsxs(Text, { dimColor: true, children: ["  ", line] }, i))), _jsx(Text, { color: "yellow", children: "  \u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsx(Box, { marginLeft: 2, children: _jsxs(Text, { children: [_jsx(Text, { bold: true, color: "green", children: "[y]" }), _jsx(Text, { dimColor: true, children: " yes  " }), _jsx(Text, { bold: true, color: "red", children: "[n]" }), _jsx(Text, { dimColor: true, children: " no  " }), _jsx(Text, { bold: true, color: "cyan", children: "[a]" }), _jsx(Text, { dimColor: true, children: " always allow this session" })] }) })] })), Array.from(tools.entries()).map(([id, tool]) => (_jsx(Box, { marginLeft: 1, children: _jsxs(Text, { color: "cyan", children: ["  ", _jsx(Spinner, { type: "dots" }), " ", tool.name, "... ", _jsx(Text, { dimColor: true, children: (() => { const s = Math.round((Date.now() - tool.startTime) / 1000); return s > 0 ? `${s}s` : ''; })() })] }) }, id))), thinking && (_jsxs(Box, { flexDirection: "column", marginLeft: 1, children: [_jsxs(Text, { color: "magenta", children: ["  ", _jsx(Spinner, { type: "dots" }), " thinking..."] }), thinkingText && (_jsxs(Text, { dimColor: true, wrap: "truncate-end", children: ["  ", thinkingText.split('\n').pop()?.slice(0, 80)] }))] })), waiting && !thinking && tools.size === 0 && (_jsx(Box, { marginLeft: 1, children: _jsxs(Text, { color: "yellow", children: ["  ", _jsx(Spinner, { type: "dots" }), " ", _jsx(Text, { dimColor: true, children: currentModel })] }) })), streamText && (_jsx(Box, { marginTop: 0, marginBottom: 0, children: _jsx(Text, { children: streamText }) })), ready && (turnTokens.input > 0 || turnTokens.output > 0) && streamText && (_jsx(Box, { marginLeft: 1, marginTop: 0, children: _jsxs(Text, { dimColor: true, children: [turnTokens.input.toLocaleString(), " in / ", turnTokens.output.toLocaleString(), " out", totalCost > 0 ? `  ·  $${totalCost.toFixed(4)} session` : ''] }) })), _jsx(InputBox, { input: ready ? input : '', setInput: ready ? setInput : () => { }, onSubmit: ready ? handleSubmit : () => { }, model: currentModel, balance: balance, focused: ready && !permissionRequest })] }));
 }
 export function launchInkUI(opts) {
     let resolveInput = null;
@@ -331,5 +368,9 @@ export function launchInkUI(opts) {
         },
         onAbort: (cb) => { abortCallback = cb; },
         cleanup: () => { instance.unmount(); },
+        requestPermission: (toolName, description) => {
+            const ui = globalThis.__runcode_ui;
+            return ui?.requestPermission(toolName, description) ?? Promise.resolve('no');
+        },
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/runcode",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "description": "RunCode — AI coding agent powered by 41+ models. Pay per use with USDC.",
   "type": "module",
   "bin": {