@bubblebrain-ai/bubble 0.0.58 → 0.0.60

package/dist/tools/path-utils.js

@@ -1,5 +1,6 @@
+import { lstatSync, readlinkSync, realpathSync } from "node:fs";
 import { homedir } from "node:os";
-import { join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 export function expandHomePath(value) {
     const text = String(value ?? "");
     if (text === "~")
@@ -14,3 +15,39 @@ export function resolveToolPath(cwd, value, fallback = ".") {
     const path = text === "" ? fallback : text;
     return resolve(cwd, expandHomePath(path));
 }
+/**
+ * Where a path really leads once symlinks are followed — including links in
+ * its parent directories and dangling links (writing through a dangling link
+ * creates its target). Parts that do not exist yet are kept as written.
+ */
+export function resolveThroughLinks(path) {
+    return followLinks(path, 0);
+}
+function followLinks(path, depth) {
+    let current = resolve(path);
+    const rest = [];
+    for (;;) {
+        try {
+            return join(realpathSync.native(current), ...rest);
+        }
+        catch {
+            // Missing (or dangling): follow a dangling link, else step up.
+        }
+        if (depth < 16) {
+            try {
+                if (lstatSync(current).isSymbolicLink()) {
+                    const target = resolve(dirname(current), readlinkSync(current));
+                    return followLinks(join(target, ...rest), depth + 1);
+                }
+            }
+            catch {
+                // Not there at all.
+            }
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            return resolve(path);
+        rest.unshift(basename(current));
+        current = parent;
+    }
+}

package/dist/tools/sensitive-paths.d.ts

@@ -1,3 +1,11 @@
+/**
+ * Credential storage the no-prompt tools (read, grep, ls, edit excerpts) must
+ * never open. Reading never asks for approval, and neither do web fetches, so
+ * without this a prompt-injected model could read a private key and send it
+ * out without a single prompt. Bash is not covered here beyond Bubble's own
+ * files: bash commands are shown to the user before they run.
+ */
 export declare function getSensitivePaths(): string[];
 export declare function isSensitivePath(filePath: string): boolean;
+/** Bash commands may not name Bubble's own credential files. */
 export declare function referencesSensitivePath(command: string): boolean;

package/dist/tools/sensitive-paths.js

@@ -1,6 +1,14 @@
+import { realpathSync } from "node:fs";
 import { homedir } from "node:os";
-import { resolve } from "node:path";
+import { basename, dirname, resolve, sep } from "node:path";
 import { getBubbleHome } from "../bubble-home.js";
+/**
+ * Credential storage the no-prompt tools (read, grep, ls, edit excerpts) must
+ * never open. Reading never asks for approval, and neither do web fetches, so
+ * without this a prompt-injected model could read a private key and send it
+ * out without a single prompt. Bash is not covered here beyond Bubble's own
+ * files: bash commands are shown to the user before they run.
+ */
 export function getSensitivePaths() {
     const bubbleHome = getBubbleHome();
     return [
@@ -8,10 +16,84 @@ export function getSensitivePaths() {
         resolve(bubbleHome, "auth.json"),
     ];
 }
+/** Home-relative credential files. */
+const HOME_CREDENTIAL_FILES = [
+    ".aws/credentials",
+    ".netrc",
+    ".git-credentials",
+    ".npmrc",
+    ".pypirc",
+    ".docker/config.json",
+    ".kube/config",
+    ".config/gh/hosts.yml",
+    ".cargo/credentials",
+    ".cargo/credentials.toml",
+    ".gem/credentials",
+    ".terraform.d/credentials.tfrc.json",
+    ".codex/auth.json",
+    ".claude/.credentials.json",
+];
+/** Home-relative directories whose whole content is credential material. */
+const HOME_CREDENTIAL_DIRS = [
+    ".gnupg",
+    ".password-store",
+    ".config/gcloud",
+    ".azure",
+    ".config/op",
+    ".aws/sso/cache",
+    ".aws/cli/cache",
+    "Library/Keychains",
+];
+/** Non-secret files in ~/.ssh; everything else there (private keys) is blocked. */
+const SSH_PUBLIC_FILES = new Set(["config", "known_hosts", "known_hosts.old", "authorized_keys"]);
 export function isSensitivePath(filePath) {
-    const resolved = resolve(filePath);
-    return getSensitivePaths().includes(resolved);
+    const candidates = new Set([resolve(filePath)]);
+    // A symlink inside the workspace must not smuggle a credential file out.
+    try {
+        candidates.add(realpathSync(filePath));
+    }
+    catch {
+        // Missing files have no link target to check.
+    }
+    return [...candidates].some(isSensitiveResolved);
+}
+function isSensitiveResolved(resolvedPath) {
+    // Case-folded: on the default macOS (and Windows) filesystem
+    // `~/.AWS/Credentials` opens `~/.aws/credentials`. On case-sensitive
+    // systems this only blocks a few more look-alike paths.
+    const path = resolvedPath.toLowerCase();
+    if (getSensitivePaths().some((sensitive) => sensitive.toLowerCase() === path))
+        return true;
+    // Compare against the home directory as written and as resolved, so a
+    // resolved link target still lines up when home itself sits behind a link.
+    return homeForms().some((home) => isSensitiveUnderHome(path, home.toLowerCase()));
+}
+function homeForms() {
+    const home = homedir();
+    try {
+        const real = realpathSync(home);
+        return real === home ? [home] : [home, real];
+    }
+    catch {
+        return [home];
+    }
+}
+function isSensitiveUnderHome(path, home) {
+    if (HOME_CREDENTIAL_FILES.some((file) => path === resolve(home, file.toLowerCase())))
+        return true;
+    if (HOME_CREDENTIAL_DIRS.some((dir) => isInside(path, resolve(home, dir.toLowerCase()))))
+        return true;
+    const ssh = resolve(home, ".ssh");
+    if (dirname(path) === ssh) {
+        const name = basename(path);
+        return !SSH_PUBLIC_FILES.has(name) && !name.endsWith(".pub");
+    }
+    return isInside(path, ssh) && path !== ssh;
+}
+function isInside(path, dir) {
+    return path === dir || path.startsWith(dir + sep);
 }
+/** Bash commands may not name Bubble's own credential files. */
 export function referencesSensitivePath(command) {
     const lower = command.toLowerCase();
     if (lower.includes("~/.bubble/config.json") || lower.includes("~/.bubble/auth.json")) {

package/dist/tools/skill.d.ts

@@ -3,3 +3,5 @@ import type { SkillRegistry } from "../skills/registry.js";
 import type { ToolRegistryEntry } from "../types.js";
 export declare function formatLoadedSkill(skill: SkillRecord): string;
 export declare function createSkillTool(registry: SkillRegistry): ToolRegistryEntry;
+/** Up to three known names closest to a mistyped one (substring first, then edit distance). */
+export declare function closestSkillNames(name: string, names: string[]): string[];

package/dist/tools/skill.js

@@ -22,7 +22,7 @@ export function createSkillTool(registry) {
         name: "skill",
         readOnly: true,
         effect: "read",
-        description: "Load a named skill on demand. Use this when a task clearly matches one of the available skills.",
+        description: "Load a skill by its exact name, as listed in the Skills section of the system prompt. Returns the skill's instructions; follow them for the task.",
         parameters: {
             type: "object",
             properties: {
@@ -38,8 +38,11 @@ export function createSkillTool(registry) {
             }
             const skill = registry.get(name);
             if (!skill) {
+                const close = closestSkillNames(name, registry.summaries().map((s) => s.name));
                 return {
-                    content: `Error: Unknown skill "${name}". Use skill_search to find available skills, then retry with the exact skill name.`,
+                    content: `Error: Unknown skill "${name}".` +
+                        (close.length ? ` Did you mean: ${close.join(", ")}?` : "") +
+                        " Use the exact name from the Skills section.",
                     isError: true,
                 };
             }
@@ -47,3 +50,32 @@ export function createSkillTool(registry) {
         },
     };
 }
+/** Up to three known names closest to a mistyped one (substring first, then edit distance). */
+export function closestSkillNames(name, names) {
+    const target = name.toLowerCase();
+    const scored = names.map((candidate) => {
+        const lower = candidate.toLowerCase();
+        // Substring matches only for real fragments; a 1–2 letter typo would match everything.
+        const contains = target.length >= 3 && (lower.includes(target) || target.includes(lower));
+        return { candidate, score: contains ? 0 : editDistance(target, lower) };
+    });
+    const limit = Math.max(2, Math.floor(target.length / 3));
+    return scored
+        .filter((s) => s.score <= limit)
+        .sort((a, b) => a.score - b.score || a.candidate.localeCompare(b.candidate))
+        .slice(0, 3)
+        .map((s) => s.candidate);
+}
+function editDistance(a, b) {
+    const row = Array.from({ length: b.length + 1 }, (_, i) => i);
+    for (let i = 1; i <= a.length; i++) {
+        let prev = row[0];
+        row[0] = i;
+        for (let j = 1; j <= b.length; j++) {
+            const cur = row[j];
+            row[j] = Math.min(row[j] + 1, row[j - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
+            prev = cur;
+        }
+    }
+    return row[b.length];
+}

package/dist/tools/task-tools.js

@@ -87,14 +87,18 @@ export function createBackgroundTaskTools(manager) {
                 if (!existing) {
                     return { content: `Error: unknown task id: ${id || "(empty)"}.`, isError: true };
                 }
-                if (existing.status !== "running") {
-                    return {
-                        content: `Task ${id} already finished (${existing.status}${existing.exitCode != null ? `, exit ${existing.exitCode}` : ""}). Nothing to kill.`,
-                        status: "success",
-                        metadata: { kind: "shell", background: true },
-                    };
-                }
+                const alreadyFinished = (task) => ({
+                    content: `Task ${id} already finished (${task.status}${task.exitCode != null ? `, exit ${task.exitCode}` : ""}). Nothing to kill.`,
+                    status: "success",
+                    metadata: { kind: "shell", background: true },
+                });
+                if (existing.status !== "running")
+                    return alreadyFinished(existing);
                 const killed = await manager.killTask(id);
+                // The task can exit on its own just before the kill lands; the manager
+                // then keeps its real outcome, so do not claim we killed it.
+                if (killed && killed.status !== "killed")
+                    return alreadyFinished(killed);
                 return {
                     content: `Killed background task ${id}${killed?.description ? ` (${killed.description})` : ""}.`,
                     status: "success",

package/dist/tui/app.js

@@ -10,6 +10,7 @@
  * All runtime logic flows through BubbleTuiController + OverlayRequestController;
  * this file owns rendering and input routing only.
  */
+import { classifyExternalRuntimeBinding } from "../external-runtime/session-policy.js";
 import process from "node:process";
 import { ProcessTerminal, TuiAltScreen, TuiMainScreen, VStack, Editor, Input, ScrollView, Markdown, matchesKey, isKeyRelease, isViewportTUI, } from "@bubblebrain-ai/pi-tui";
 import { StreamingMessageComponent } from "./components/streaming-message.js";
@@ -32,6 +33,7 @@ import { SkillsPanelComponent } from "./components/skills-panel.js";
 import { SessionPickerComponent } from "./components/session-picker.js";
 import { ComposerImagePreviewComponent, ImageViewerComponent } from "./components/image-preview.js";
 import { registry as slashRegistry } from "../slash-commands/index.js";
+import { syncSystemPrompt } from "../slash-commands/commands.js";
 import { collectUsageStatsBundle } from "../stats/usage.js";
 import { ComposerController, } from "./controller/composer-controller.js";
 import { OverlayRequestController } from "./controller/overlay-controller.js";
@@ -153,6 +155,7 @@ export class PiTuiApp {
             providerId: () => this.options.agent.providerId,
             themeMode: () => this.themeMode,
             detectedTheme: () => this.detectedTheme,
+            grokRuntimeActive: () => classifyExternalRuntimeBinding(this.activeSessionManager().getMetadata?.().externalRuntime) === "grok",
             onModelSuggestionsChanged: () => {
                 if (!this.disposed)
                     this.editor.refreshAutocomplete();
@@ -206,6 +209,7 @@ export class PiTuiApp {
             groups: this.options.controller.getSubagentGroups?.() ?? [],
             workflows: this.options.controller.getWorkflows?.() ?? [],
             tasks: this.options.controller.getBackgroundTasks?.() ?? [],
+            turnStartedAt: this.options.controller.getTurnStartedAt?.(),
         }), () => this.tui.terminal.rows, {
             // Pane navigation only changes local presentation state. Reprojecting
             // the live trace/Markdown here is both unnecessary and expensive.
@@ -271,17 +275,10 @@ export class PiTuiApp {
         if (approvalHandlerRef) {
             approvalHandlerRef.current = async (request) => {
                 const choice = await this.approvalDialog(request);
-                if (choice.kind === "approve_bash_prefix") {
-                    if (request.type !== "bash" || !this.options.bashAllowlist) {
-                        return {
-                            action: "reject",
-                            feedback: "This host cannot remember Bash approvals for the current session.",
-                        };
-                    }
-                    // Session-scoped and command-scoped: PermissionAwareApprovalController
-                    // consults this same instance before opening the next dialog.
-                    this.options.bashAllowlist.add(choice.prefix);
-                    return { action: "approve" };
+                // "This session": the approval controller records the request's
+                // sessionGrant (exact bash command / MCP tool) before the next dialog.
+                if (choice.kind === "approve_session") {
+                    return { action: "approve", remember: "session" };
                 }
                 return choice.kind === "approve_once"
                     ? { action: "approve" }
@@ -619,6 +616,12 @@ export class PiTuiApp {
                     this.composer.replaceDraft(mode === "model" ? "/model " : mode === "provider" ? "/provider " : "/theme ");
                     this.editor.refreshAutocomplete();
                 }
+                else if (mode === "login" || mode === "logout") {
+                    // Same inline surface as /model: the account list appears as the
+                    // command's argument menu, so nothing is chosen for the user.
+                    this.composer.replaceDraft(mode === "login" ? "/login " : "/logout ");
+                    this.editor.refreshAutocomplete();
+                }
                 else if (mode === "key" && providerId) {
                     this.openProviderKeyPhase(providerId);
                 }
@@ -771,6 +774,10 @@ export class PiTuiApp {
         this.animationClock.setActive(false);
         this.tui.stop();
         const { FullscreenApp } = await import("./fullscreen.js");
+        // The import yields; a dispose (or a second /fullscreen) racing it must not
+        // mount an alternate screen nobody will tear down.
+        if (this.disposed || this.fullscreen)
+            return;
         this.fullscreen = new FullscreenApp({
             controller: this.options.controller,
             agent: this.options.agent,
@@ -848,8 +855,12 @@ export class PiTuiApp {
             getTerminalRows: () => this.tui.terminal.rows,
             onClose: () => handle?.hide(),
             onRender: () => this.renderSnapshot(),
+            getCatalogChars: () => this.options.agent.getSkillCatalogChars?.(),
             onSkillsChanged: () => {
                 this.options.agent.setSkillSummaries(skillRegistry.summaries());
+                // The Skills catalog lives in the system prompt; rebuild it so the next turn sees the change.
+                const ctx = this.buildSlashContext();
+                syncSystemPrompt(ctx, ctx.agent.model ?? "");
                 this.editor.refreshAutocomplete();
                 this.renderSnapshot();
             },
@@ -1509,7 +1520,6 @@ export class PiTuiApp {
     approvalDialog(request) {
         return new Promise((resolve) => {
             const dialog = new ApprovalDialogComponent(request, () => this.tui.terminal.rows, {
-                allowBashPrefix: this.options.bashAllowlist !== undefined,
                 getTheme: () => this.theme,
             });
             const handle = this.tui.showOverlay(dialog, {

package/dist/tui/components/approval-dialog.d.ts

@@ -4,8 +4,7 @@ import { type Theme } from "../model/theme.js";
 export type ApprovalDialogChoice = {
     kind: "approve_once";
 } | {
-    kind: "approve_bash_prefix";
-    prefix: string;
+    kind: "approve_session";
 } | {
     kind: "reject";
 };
@@ -14,8 +13,6 @@ interface ApprovalPresentation {
     details: string[];
 }
 export interface ApprovalDialogOptions {
-    /** Only advertise session remembering when the host can persist the prefix. */
-    allowBashPrefix?: boolean;
     getTheme?: () => Theme;
 }
 /** Convert every approval variant into a compact, request-specific heading and preview. */
@@ -31,10 +28,13 @@ export declare class ApprovalDialogComponent implements Component, Focusable {
     private readonly options;
     focused: boolean;
     private selectedIndex;
-    private bashPrefix;
     onSelect?: (choice: ApprovalDialogChoice) => void;
     onCancel?: () => void;
     constructor(request: ApprovalRequest, getTerminalRows: () => number, options?: ApprovalDialogOptions);
+    /**
+     * "This session" appears only when the approval controller attached a
+     * sessionGrant: the exact bash command, or an MCP tool name.
+     */
     private choices;
     render(width: number): string[];
     handleInput(data: string): void;

package/dist/tui/components/approval-dialog.js

@@ -1,21 +1,9 @@
 import path from "node:path";
 import chalk from "chalk";
-import { decodeKittyPrintable, matchesKey, truncateToWidth, wrapTextWithAnsi, } from "@bubblebrain-ai/pi-tui";
-import { inferBashPrefix } from "../../approval/session-cache.js";
+import { matchesKey, truncateToWidth, wrapTextWithAnsi, } from "@bubblebrain-ai/pi-tui";
 import { paintSheetLine, padSheetLine, safeSheetText } from "./bottom-sheet.js";
 import { darkTheme } from "../model/theme.js";
 import { themeDim, themeForeground } from "../model/theme-style.js";
-function printableInput(data) {
-    const decoded = decodeKittyPrintable(data);
-    if (decoded !== undefined)
-        return decoded;
-    // ProcessTerminal has already unwrapped bracketed paste. Reject raw control
-    // input here so an escape sequence can never become part of an allow rule.
-    // eslint-disable-next-line no-control-regex
-    if (!data || /[\u0000-\u001f\u007f-\u009f]/.test(data))
-        return undefined;
-    return data;
-}
 function bashCommandLabel(command) {
     const firstToken = safeSheetText(command).trim().match(/^([^\s;&|]+)/)?.[1] ?? "command";
     const unquoted = firstToken.replace(/^["'`]+|["'`]+$/g, "");
@@ -97,23 +85,29 @@ export class ApprovalDialogComponent {
     options;
     focused = false;
     selectedIndex = 0;
-    bashPrefix;
     onSelect;
     onCancel;
     constructor(request, getTerminalRows, options = {}) {
         this.request = request;
         this.getTerminalRows = getTerminalRows;
         this.options = options;
-        this.bashPrefix = request.type === "bash" ? inferBashPrefix(request.command) : "";
     }
+    /**
+     * "This session" appears only when the approval controller attached a
+     * sessionGrant: the exact bash command, or an MCP tool name.
+     */
     choices() {
+        const grant = this.request.type === "bash" || this.request.type === "external_tool"
+            ? this.request.sessionGrant
+            : undefined;
         return [
             { kind: "approve_once", label: "Yes, proceed" },
-            ...(this.request.type === "bash" && this.options.allowBashPrefix
+            ...(grant
                 ? [{
-                        kind: "approve_bash_prefix",
-                        label: "Yes, don't ask again for",
-                        editablePrefix: true,
+                        kind: "approve_session",
+                        label: this.request.type === "bash"
+                            ? "Yes, and don't ask again for this exact command this session"
+                            : `Yes, don't ask again this session for ${safeSheetText(grant)}`,
                     }]
                 : []),
             { kind: "reject", label: "No, reject" },
@@ -173,10 +167,7 @@ export class ApprovalDialogComponent {
         for (const { choice, index } of visibleChoices) {
             const selected = index === this.selectedIndex;
             const radio = selected ? "●" : "○";
-            const prefix = choice.editablePrefix
-                ? ` [${safeSheetText(this.bashPrefix) || "command prefix"}${selected ? "▏" : ""}]`
-                : "";
-            const label = `${index + 1} (${radio}) ${choice.label}${prefix}`;
+            const label = `${index + 1} (${radio}) ${choice.label}`;
             const line = `${indent}${selected
                 ? chalk.bold(themeForeground(theme.inputText, label))
                 : themeForeground(theme.muted, label)}`;
@@ -187,10 +178,7 @@ export class ApprovalDialogComponent {
         const paintedPanel = panelLines.slice(0, panelBudget).map(({ line, selected }) => paintSheetLine(line, safeWidth, selected, theme));
         if (!showHelp)
             return paintedPanel;
-        const editing = choices[this.selectedIndex]?.editablePrefix;
-        const help = editing
-            ? `${this.selectedIndex + 1}/${choices.length} select  │  type/backspace edit prefix  │  Ctrl+U clear  │  Enter confirm  │  Esc deny`
-            : `${this.selectedIndex + 1}/${choices.length} select  │  Tab next  │  Enter confirm  │  Esc deny`;
+        const help = `${this.selectedIndex + 1}/${choices.length} select  │  Tab next  │  Enter confirm  │  Esc deny`;
         return [...paintedPanel, themeDim(theme.dim, padSheetLine(help, safeWidth))];
     }
     handleInput(data) {
@@ -210,35 +198,12 @@ export class ApprovalDialogComponent {
         const selected = choices[this.selectedIndex];
         if (!selected)
             return;
-        if (selected.editablePrefix && (matchesKey(data, "backspace") || matchesKey(data, "delete"))) {
-            this.bashPrefix = Array.from(this.bashPrefix).slice(0, -1).join("");
-            return;
-        }
-        if (selected.editablePrefix && matchesKey(data, "ctrl+u")) {
-            this.bashPrefix = "";
-            return;
-        }
         if (matchesKey(data, "enter")) {
-            if (selected.kind === "approve_bash_prefix") {
-                const prefix = this.bashPrefix.trim();
-                if (!prefix)
-                    return;
-                this.onSelect?.({ kind: selected.kind, prefix });
-            }
-            else {
-                this.onSelect?.({ kind: selected.kind });
-            }
+            this.onSelect?.({ kind: selected.kind });
             return;
         }
         if (matchesKey(data, "escape") || matchesKey(data, "ctrl+c")) {
             this.onCancel?.();
-            return;
-        }
-        if (selected.editablePrefix) {
-            const printable = printableInput(data);
-            if (printable !== undefined) {
-                this.bashPrefix += safeSheetText(printable).replace(/[\r\n\t]+/g, " ");
-            }
         }
     }
     invalidate() {

package/dist/tui/components/skills-panel.d.ts

@@ -6,6 +6,8 @@ export interface SkillsPanelComponentOptions {
     onClose(): void;
     onRender(): void;
     onSkillsChanged(): void;
+    /** Catalog budget in characters (the agent's setting); undefined uses the default. */
+    getCatalogChars?(): number | undefined;
     theme?: Theme;
 }
 /** Grok-style centered Skill browser/manager opened by /skills. */
@@ -37,6 +39,8 @@ export declare class SkillsPanelComponent implements Component, Focusable {
     handleMouse(event: TuiMouseEvent): boolean;
     invalidate(): void;
     private frameLine;
+    /** How much of the always-present catalog the enabled skills use, so users know when to prune. */
+    private catalogSummary;
     private renderSearch;
     private renderFooter;
     private buildRows;

package/dist/tui/components/skills-panel.js

@@ -2,6 +2,7 @@ import { homedir } from "node:os";
 import { dirname } from "node:path";
 import chalk from "chalk";
 import { Input, decodeKittyPrintable, matchesKey, truncateToWidth, visibleWidth, wrapTextWithAnsi, } from "@bubblebrain-ai/pi-tui";
+import { buildSkillCatalog } from "../../skills/format.js";
 import { parseTerminalMouseWheel } from "../model/terminal-mouse.js";
 import { darkTheme } from "../model/theme.js";
 import { themeBackground, themeDim, themeForeground } from "../model/theme-style.js";
@@ -116,7 +117,7 @@ export class SkillsPanelComponent {
         const top = themeForeground(theme.border, `┌${"─".repeat(topDashCount)}`) + ` ${close} ` + themeForeground(theme.border, "┐");
         const bottom = themeForeground(theme.border, `└${horizontal}┘`);
         const separator = themeForeground(theme.border, `├${horizontal}┤`);
-        const tab = this.frameLine(`  ${chalk.bold(themeForeground(theme.inputText, themeBackground(theme.traceHoverBg, " Skills ")))}`, innerWidth);
+        const tab = this.frameLine(`  ${chalk.bold(themeForeground(theme.inputText, themeBackground(theme.traceHoverBg, " Skills ")))}  ${themeForeground(theme.muted, this.catalogSummary())}`, innerWidth);
         const search = this.frameLine(this.renderSearch(innerWidth), innerWidth);
         const footerRows = this.searchActive ? 0 : 2;
         this.bodyRows = Math.max(1, frameHeight - 5 - footerRows);
@@ -284,6 +285,19 @@ export class SkillsPanelComponent {
         const theme = this.options.theme ?? darkTheme;
         return `${themeForeground(theme.border, "│")}${themeBackground(theme.backgroundPanel, fit(content, width))}${themeForeground(theme.border, "│")}`;
     }
+    /** How much of the always-present catalog the enabled skills use, so users know when to prune. */
+    catalogSummary() {
+        const catalog = buildSkillCatalog(this.registry.summaries(), { budgetChars: this.options.getCatalogChars?.() });
+        if (catalog.budgetChars === 0)
+            return "catalog off · skill_search only";
+        const duplicates = this.registry.getDiagnostics().filter((d) => d.message.startsWith("Duplicate skill name")).length;
+        return [
+            `catalog ${catalog.chars.toLocaleString("en-US")}/${catalog.budgetChars.toLocaleString("en-US")} chars`,
+            `${catalog.listed} listed`,
+            catalog.unlisted ? `${catalog.unlisted} not listed` : "",
+            duplicates ? `${duplicates} duplicate${duplicates === 1 ? "" : "s"} ignored` : "",
+        ].filter(Boolean).join(" · ");
+    }
     renderSearch(innerWidth) {
         const theme = this.options.theme ?? darkTheme;
         const filter = filterLabel(this.filter);

package/dist/tui/components/streaming-message.js

@@ -268,10 +268,15 @@ export class StreamingMessageComponent extends VStack {
             timelineBlocks.push({ rows, traceTargets: rows.map(() => undefined) });
         }
         const timeline = joinTranscriptProjections(timelineBlocks);
-        this.reasoningGapRow.setLines(tail.reasoning && timeline.rows.length > 0 ? 1 : 0);
+        const start = Math.max(0, timeline.rows.length - this.timelineRows.length);
+        // The settled transcript joins reasoning and the timeline with exactly one
+        // spacer. A tool group already carries its own top padding, so adding the
+        // gap row on top of it made the live surface one row taller than the
+        // committed one and the trace jumped up at every turn boundary.
+        const timelineBringsSpacer = start === 0 && timeline.leadingSpacer === true;
+        this.reasoningGapRow.setLines(tail.reasoning && timeline.rows.length > 0 && !timelineBringsSpacer ? 1 : 0);
         if (timeline.rows.length > 0) {
             hasLiveRows = true;
-            const start = Math.max(0, timeline.rows.length - this.timelineRows.length);
             const visible = timeline.rows.slice(start);
             const visibleTargets = timeline.traceTargets.slice(start);
             this.timelineEllipsisRow.setText(timeline.rows.length > visible.length

package/dist/tui/components/tasks-pane.d.ts

@@ -7,6 +7,8 @@ export interface TasksPaneSnapshot {
     groups: SubagentGroup[];
     workflows: WorkflowRunSnapshot[];
     tasks: BackgroundTaskInfo[];
+    /** Start of the current agent run; undefined keeps finished work hidden. */
+    turnStartedAt?: number;
 }
 export interface WorkflowPaneItem {
     kind: "workflow";
@@ -51,10 +53,25 @@ export declare class TasksPaneComponent implements Component {
     focused: boolean;
     private open;
     private manuallyClosed;
+    /**
+     * History is a view the user opts into for one look, never a mode: it is
+     * dropped whenever the pane closes and when a new round of activity starts.
+     * Otherwise one Ctrl+G after a finished turn left every earlier subagent
+     * listed above the composer for the rest of the session, next to a header
+     * that counts only the running ones.
+     */
     private showHistory;
     private selectedId?;
+    /**
+     * Whether the user picked the selection (keys or click). The pane always
+     * needs one, so it defaults to the first row — but a default nobody chose
+     * must not steer the window: a task that was once the only row stayed
+     * "selected" and scrolled later subagents out of an untouched pane.
+     */
+    private selectionIsUsers;
     private hoveredId?;
     private lastActiveCount;
+    private lastTurnStartedAt;
     private lastRows;
     private allRows;
     private frame;
@@ -67,11 +84,32 @@ export declare class TasksPaneComponent implements Component {
     isOpen(): boolean;
     isAvailable(): boolean;
     activeCount(): number;
+    /** Rows the default view lists: running work plus what this turn launched. */
+    defaultViewCount(): number;
+    visibleCount(): number;
+    /**
+     * Finished rows the pane lists next to the running ones, by outcome. Counted
+     * in the pane's current view, history included when it is showing, so the
+     * header never reports fewer rows than the list holds.
+     */
+    settledCounts(): {
+        done: number;
+        failed: number;
+        stopped: number;
+    };
     totalCount(): number;
     activityGlyph(): string;
     theme(): Theme;
     toggle(forceFocus?: boolean): void;
     close(): void;
+    /**
+     * Advance open/history state from the latest snapshot. Both the status bar
+     * and the pane call this before rendering: the bar is laid out first, so a
+     * transition made only inside the pane's render would leave the bar one
+     * frame behind — forever, when nothing is animating to trigger a redraw.
+     * Idempotent per snapshot (it compares against the last values it saw).
+     */
+    syncState(): void;
     render(width: number): string[];
     private renderItem;
     handleInput(data: string): void;