@deepseek-harness-tui/dsh-tui 0.8.6 → 0.8.7

package/lib/types/theme.js

@@ -95,16 +95,16 @@ const darkTheme = {
     toolDotWrite: rgb('#B3A0D4'), // soft violet — edit/write
     toolDotWeb: rgb('#7DA1DE'), // mist blue — web search/fetch
     toolDotTask: rgb('#D194AE'), // mist rose — subagent/jobs
-    syntaxKeyword: rgb('#82AAFF'), // vivid blue (theme anchor)
-    syntaxString: rgb('#E5C07B'), // gold - echoes the user-message gold accent
-    syntaxComment: rgb('#6B7280'), // neutral grey
-    syntaxNumber: rgb('#D19A66'), // warm orange
-    syntaxFunction: rgb('#56B6C2'), // vivid cyan
-    syntaxType: rgb('#C678DD'), // vivid violet
+    syntaxKeyword: rgb('#78A0D6'), // muted anchor blue
+    syntaxString: rgb('#79AD91'), // mist green, distinct without neon saturation
+    syntaxComment: rgb('#74808D'), // neutral blue-grey
+    syntaxNumber: rgb('#C89B70'), // softened warm amber
+    syntaxFunction: rgb('#6FAEB5'), // muted cyan
+    syntaxType: rgb('#A98FBF'), // softened violet
     syntaxVariable: rgb('#C9D1D9'), // near-text
     syntaxOperator: rgb('#93A1B0'), // blue grey
     syntaxPunctuation: rgb('#7A8694'), // dim blue grey
-    syntaxConstant: rgb('#E48A9B'), // soft rose
+    syntaxConstant: rgb('#C98291'), // softened rose
     red_FOR_SUBAGENTS_ONLY: rgb('#D4685E'),
     blue_FOR_SUBAGENTS_ONLY: rgb('#7496D6'),
     green_FOR_SUBAGENTS_ONLY: rgb('#66B285'),
@@ -143,6 +143,14 @@ const darkTheme = {
     rainbow_blue_shimmer: rgb('#AFBFE2'),
     rainbow_indigo_shimmer: rgb('#BFB4DE'),
     rainbow_violet_shimmer: rgb('#D1B4D1'),
+    subagentBullet: rgb('#D194AE'),
+    subagentDescription: rgb('#E8E6E0'),
+    subagentModel: rgb('#8D95A6'),
+    subagentElapsed: rgb('#8D95A6'),
+    subagentToolName: rgb('#7DA1DE'),
+    subagentStatusRunning: rgb('#7DA1DE'),
+    subagentStatusCompleted: rgb('#82B89D'),
+    subagentStatusFailed: rgb('#DA8A93'),
 };
 /**
  * Gentle Mist Blue light theme — the strict original card. Blue carries
@@ -191,16 +199,16 @@ const lightTheme = {
     toolDotWrite: rgb('#7A5CA8'),
     toolDotWeb: rgb('#4A63A8'),
     toolDotTask: rgb('#B04A5A'),
-    syntaxKeyword: rgb('#2557C7'),
-    syntaxString: rgb('#8A6A00'),
-    syntaxComment: rgb('#8A8F98'),
-    syntaxNumber: rgb('#B25E1E'),
-    syntaxFunction: rgb('#0F7A8A'),
-    syntaxType: rgb('#8A3FC7'),
+    syntaxKeyword: rgb('#3F68B5'), // clear primary blue without neon saturation
+    syntaxString: rgb('#3F805F'), // readable muted green
+    syntaxComment: rgb('#7D858F'), // neutral blue-grey
+    syntaxNumber: rgb('#A7652B'), // warm amber accent
+    syntaxFunction: rgb('#2E7E8A'), // muted cyan
+    syntaxType: rgb('#7E55A4'), // softened violet
     syntaxVariable: rgb('#343945'),
     syntaxOperator: rgb('#5B6672'),
     syntaxPunctuation: rgb('#9AA0A8'),
-    syntaxConstant: rgb('#C2186B'),
+    syntaxConstant: rgb('#A84472'), // muted rose accent
     red_FOR_SUBAGENTS_ONLY: rgb('#BE5A52'),
     blue_FOR_SUBAGENTS_ONLY: rgb('#3F6CC4'),
     green_FOR_SUBAGENTS_ONLY: rgb('#4E9675'),
@@ -239,6 +247,14 @@ const lightTheme = {
     rainbow_blue_shimmer: rgb('#A9BCE0'),
     rainbow_indigo_shimmer: rgb('#B7AFD8'),
     rainbow_violet_shimmer: rgb('#CFB0CC'),
+    subagentBullet: rgb('#C07A93'),
+    subagentDescription: rgb('#343945'),
+    subagentModel: rgb('#8991A0'),
+    subagentElapsed: rgb('#8991A0'),
+    subagentToolName: rgb('#3F6CC4'),
+    subagentStatusRunning: rgb('#3F6CC4'),
+    subagentStatusCompleted: rgb('#4E9675'),
+    subagentStatusFailed: rgb('#C65D6B'),
 };
 /**
  * Dark ANSI theme using only the 16 standard ANSI colors, for terminals
@@ -337,6 +353,14 @@ const darkAnsiTheme = {
     rainbow_blue_shimmer: 'ansi:cyanBright',
     rainbow_indigo_shimmer: 'ansi:blueBright',
     rainbow_violet_shimmer: 'ansi:magentaBright',
+    subagentBullet: 'ansi:magentaBright',
+    subagentDescription: 'ansi:whiteBright',
+    subagentModel: 'ansi:white',
+    subagentElapsed: 'ansi:white',
+    subagentToolName: 'ansi:cyanBright',
+    subagentStatusRunning: 'ansi:blueBright',
+    subagentStatusCompleted: 'ansi:greenBright',
+    subagentStatusFailed: 'ansi:redBright',
 };
 /**
  * Resolve a theme name to its concrete color palette.

package/lib/types/tips.js

@@ -60,10 +60,10 @@ export const TIPS = [
         en: 'In trajectory, / queries fields like tool:, err:, >10s, tok>1k',
     },
     {
-        id: 'keys-ctrl-x',
+        id: 'keys-ctrl-g',
         group: 'keys',
-        zh: 'Ctrl+X 用 $VISUAL 编辑器编辑当前输入',
-        en: 'Ctrl+X edits your input in the $VISUAL editor',
+        zh: 'Ctrl+G 用 $VISUAL/$EDITOR 编辑器编辑当前输入',
+        en: 'Ctrl+G edits your input in the $VISUAL/$EDITOR editor',
     },
     {
         id: 'keys-ctrl-enter',

package/lib/types/update.d.ts

@@ -88,6 +88,24 @@ export declare function tuiUpdatePluginArgs(profile: string, targetVersion?: str
  * token, so matching both keeps the retry from masking real failures.
  */
 export declare function isTransientUpdateFailure(stderr: string): boolean;
+/**
+ * Best-effort migrate the GLOBAL launcher to the delegating shim (0.8.7):
+ * after a successful profile update, copy this package's `bin/dsh-tui.js`
+ * and `package.json` over the global install so the launcher can never lag
+ * the profile again — the shim delegates all logic to the profile copy it
+ * just updated. Single-file-safe by contract: the new bin imports nothing
+ * from lib/ (see its header), so overwriting it inside an older global
+ * install cannot dangle a missing helper.
+ *
+ * Locating the global dir relies on argv[1] being the global `dsh-tui.js`
+ * (true when booted through the `dsh-tui` command). Source checkouts and
+ * direct `dsh --profile` boots resolve nothing — the migration is a silent
+ * no-op there. Write failures (permissions, locked files) are equally
+ * silent: the launcher-alignment warning remains the fallback diagnosis.
+ *
+ * @returns true when the global launcher files were replaced.
+ */
+export declare function migrateGlobalLauncher(): boolean;
 /**
  * Update the installed dsh-tui package and restart the same launcher while
  * preserving the active session. The TUI must already be unmounted before

package/lib/types/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/update.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAIlD,OAAO,EAAE,UAAU,EAAE,CAAA;AAQrB,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEvB,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAiBxD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,SAAS,MAAM,EAAiB,GAAG,MAAM,GAAG,SAAS,CAahG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAW5C;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG7D;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,eAAe,CAAC,CAcvE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAG5E;AA6DD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAIrF;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,CAuE1B"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/update.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAIlD,OAAO,EAAE,UAAU,EAAE,CAAA;AAQrB,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEvB,MAAM,WAAW,eAAe;IAC9B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAiBxD;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,GAAE,SAAS,MAAM,EAAiB,GAAG,MAAM,GAAG,SAAS,CAahG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAW5C;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAG7D;AA4BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,eAAe,CAAC,CAcvE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAG5E;AA6DD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAIrF;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CA2C/C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,eAAe,CAAC,CA+E1B"}

package/lib/types/update.js

@@ -1,7 +1,7 @@
 import { spawn } from 'node:child_process';
-import { readFileSync } from 'node:fs';
+import { readFileSync, realpathSync, renameSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { gte, gt, lt, valid } from 'semver';
 import { shellQuote } from './utils/shellQuote.js';
@@ -225,6 +225,70 @@ export function tuiUpdatePluginArgs(profile, targetVersion) {
 export function isTransientUpdateFailure(stderr) {
     return /ENOENT|EPERM|EBUSY/i.test(stderr) && /_tmp_\d+/i.test(stderr);
 }
+/**
+ * Best-effort migrate the GLOBAL launcher to the delegating shim (0.8.7):
+ * after a successful profile update, copy this package's `bin/dsh-tui.js`
+ * and `package.json` over the global install so the launcher can never lag
+ * the profile again — the shim delegates all logic to the profile copy it
+ * just updated. Single-file-safe by contract: the new bin imports nothing
+ * from lib/ (see its header), so overwriting it inside an older global
+ * install cannot dangle a missing helper.
+ *
+ * Locating the global dir relies on argv[1] being the global `dsh-tui.js`
+ * (true when booted through the `dsh-tui` command). Source checkouts and
+ * direct `dsh --profile` boots resolve nothing — the migration is a silent
+ * no-op there. Write failures (permissions, locked files) are equally
+ * silent: the launcher-alignment warning remains the fallback diagnosis.
+ *
+ * @returns true when the global launcher files were replaced.
+ */
+export function migrateGlobalLauncher() {
+    const launcherBin = process.argv[1];
+    if (launcherBin === undefined || !launcherBin.endsWith('dsh-tui.js'))
+        return false;
+    // Walk up from the bin to the containing package; accept it only when it
+    // is OUR package and not the profile copy we are running from (junction
+    // layouts collapse both onto the same real path — copying onto ourselves
+    // would be a no-op at best).
+    let dir = dirname(resolve(launcherBin));
+    const ownDir = dirname(dirname(fileURLToPath(import.meta.url)));
+    for (let depth = 0; depth < 4; depth++) {
+        const manifest = join(dir, 'package.json');
+        try {
+            const parsed = JSON.parse(readFileSync(manifest, 'utf8'));
+            if (parsed !== null && typeof parsed === 'object' && !Array.isArray(parsed)
+                && parsed.name === PACKAGE_NAME) {
+                let same = false;
+                try {
+                    same = realpathSync(dir) === realpathSync(ownDir);
+                }
+                catch {
+                    same = resolve(dir) === resolve(ownDir);
+                }
+                if (same)
+                    return false;
+                // tmp + rename keeps each file atomic; a crash mid-migration leaves
+                // either the old or the new file, never a truncated one.
+                const replace = (target, source) => {
+                    const staged = `${target}.dsh-tui-migrate`;
+                    writeFileSync(staged, readFileSync(source));
+                    renameSync(staged, target);
+                };
+                replace(join(dir, 'bin', 'dsh-tui.js'), join(ownDir, 'bin', 'dsh-tui.js'));
+                replace(manifest, join(ownDir, 'package.json'));
+                return true;
+            }
+        }
+        catch {
+            // Unreadable manifest at this level — keep walking up.
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return false;
+        dir = parent;
+    }
+    return false;
+}
 /**
  * Update the installed dsh-tui package and restart the same launcher while
  * preserving the active session. The TUI must already be unmounted before
@@ -297,6 +361,13 @@ export async function updateTuiAndRestart(sessionId, profile, targetVersion) {
             return { updateCode: 1, restartCode: 1 };
         }
     }
+    // Launcher migration (0.8.7): the freshly installed profile carries the
+    // delegating shim — stamp it over the global launcher so this is the LAST
+    // time the outer copy can lag. Best-effort; the alignment warning stays as
+    // the fallback when the copy is impossible.
+    if (migrateGlobalLauncher()) {
+        process.stderr.write('dsh-tui: global launcher aligned to the delegating shim (no manual npm i -g needed anymore).\n');
+    }
     const restartCode = await runProcess(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {
         env: {
             ...process.env,

package/lib/types/utils/execFileNoThrow.d.ts

@@ -4,31 +4,14 @@ export interface ExecFileNoThrowResult {
     stdout: string;
     stderr: string;
 }
-/**
- * Options for {@link execFileNoThrow}: stdin payload, timeout, and child
- * working directory.
- */
+/** Options for {@link execFileNoThrow}: stdin payload, timeout, and child
+ * working directory. */
 export interface ExecFileNoThrowOptions {
-    /** Stdin payload (OSC 52 clipboard helpers and tmux load-buffer). */
     input?: string;
-    /** Kill the child after this many milliseconds. */
     timeout?: number;
-    /**
-     * Accepted for call-site compatibility with the original execa-based
-     * implementation; `false` (the only value the Ink core passes) matches this
-     * shim's behavior of running in the current working directory.
-     */
     useCwd?: boolean;
-    /** Working directory for the child; defaults to the parent's cwd. */
     cwd?: string;
 }
-/**
- * Run a command without throwing: resolves with `{ code, stdout, stderr }`
- * even when the process exits non-zero or cannot spawn.
- * @param file - The executable path to spawn.
- * @param args - Command-line arguments; defaults to none.
- * @param options - Spawn options (input, timeout, cwd).
- * @returns The process outcome: exit code, captured stdout, and captured stderr.
- */
+/** Run a command without throwing; child output is bounded for safety. */
 export declare function execFileNoThrow(file: string, args?: readonly string[], options?: ExecFileNoThrowOptions): Promise<ExecFileNoThrowResult>;
 //# sourceMappingURL=execFileNoThrow.d.ts.map

package/lib/types/utils/execFileNoThrow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execFileNoThrow.d.ts","sourceRoot":"","sources":["../../../src/utils/execFileNoThrow.ts"],"names":[],"mappings":"AAEA,qDAAqD;AACrD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CAiChC"}
+{"version":3,"file":"execFileNoThrow.d.ts","sourceRoot":"","sources":["../../../src/utils/execFileNoThrow.ts"],"names":[],"mappings":"AAKA,qDAAqD;AACrD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED;wBACwB;AACxB,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AA6BD,0EAA0E;AAC1E,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,SAAS,MAAM,EAAO,EAC5B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,qBAAqB,CAAC,CA+BhC"}

package/lib/types/utils/execFileNoThrow.js

@@ -1,44 +1,65 @@
 import { spawn } from 'node:child_process';
-/**
- * Run a command without throwing: resolves with `{ code, stdout, stderr }`
- * even when the process exits non-zero or cannot spawn.
- * @param file - The executable path to spawn.
- * @param args - Command-line arguments; defaults to none.
- * @param options - Spawn options (input, timeout, cwd).
- * @returns The process outcome: exit code, captured stdout, and captured stderr.
- */
-export function execFileNoThrow(file, args, options) {
+import { extname } from 'node:path';
+const MAX_CAPTURE_BYTES = 64 * 1024;
+function appendBounded(chunks, chunk, total) {
+    if (total.value >= MAX_CAPTURE_BYTES)
+        return;
+    const remaining = MAX_CAPTURE_BYTES - total.value;
+    const part = chunk.subarray(0, remaining);
+    chunks.push(part);
+    total.value += part.length;
+}
+/** Quote one argument for the Windows command interpreter without flattening
+ * the caller's argv into an unquoted shell command. */
+function quoteWindowsArg(value) {
+    const escaped = value.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/g, '$1$1');
+    return `"${escaped.replace(/%/g, '%%')}"`;
+}
+function spawnCommand(file, args, options) {
+    const isWindowsScript = process.platform === 'win32' && /\.(?:cmd|bat)$/iu.test(extname(file));
+    if (!isWindowsScript)
+        return spawn(file, args, { timeout: options?.timeout, cwd: options?.cwd });
+    const command = `"${[file, ...args].map(quoteWindowsArg).join(' ')}"`;
+    return spawn(process.env.ComSpec ?? 'cmd.exe', ['/d', '/s', '/c', command], {
+        timeout: options?.timeout,
+        cwd: options?.cwd,
+        windowsHide: true,
+        windowsVerbatimArguments: true,
+    });
+}
+/** Run a command without throwing; child output is bounded for safety. */
+export function execFileNoThrow(file, args = [], options) {
     return new Promise(resolve => {
-        const child = spawn(file, args ?? [], { timeout: options?.timeout, cwd: options?.cwd });
-        // Collect raw bytes and decode once at close: per-chunk toString() splits
-        // multi-byte UTF-8 characters straddling a chunk boundary into U+FFFD.
+        let child;
+        try {
+            child = spawnCommand(file, args, options);
+        }
+        catch {
+            resolve({ code: 1, stdout: '', stderr: '' });
+            return;
+        }
         const stdoutChunks = [];
         const stderrChunks = [];
-        child.stdout.on('data', (chunk) => {
-            stdoutChunks.push(chunk);
-        });
-        child.stderr.on('data', (chunk) => {
-            stderrChunks.push(chunk);
-        });
-        // A child may exit before consuming the supplied input. The resulting
-        // EPIPE/EOF belongs to that child outcome and must not crash the caller.
-        child.stdin.on('error', () => { });
-        child.on('error', () => {
-            resolve({
-                code: 1,
-                stdout: Buffer.concat(stdoutChunks).toString('utf8'),
-                stderr: Buffer.concat(stderrChunks).toString('utf8'),
-            });
-        });
-        child.on('close', code => {
+        const stdoutTotal = { value: 0 };
+        const stderrTotal = { value: 0 };
+        let settled = false;
+        const finish = (code) => {
+            if (settled)
+                return;
+            settled = true;
             resolve({
                 code,
                 stdout: Buffer.concat(stdoutChunks).toString('utf8'),
                 stderr: Buffer.concat(stderrChunks).toString('utf8'),
             });
-        });
+        };
+        child.stdout?.on('data', (chunk) => appendBounded(stdoutChunks, chunk, stdoutTotal));
+        child.stderr?.on('data', (chunk) => appendBounded(stderrChunks, chunk, stderrTotal));
+        child.stdin?.on('error', () => { });
+        child.on('error', () => finish(1));
+        child.on('close', code => finish(code));
         if (options?.input !== undefined)
-            child.stdin.write(options.input);
-        child.stdin.end();
+            child.stdin?.write(options.input);
+        child.stdin?.end();
     });
 }

package/lib/types/utils/externalEditor.d.ts

@@ -1,5 +1,5 @@
 /**
- * External editor round-trip for the prompt input (issue #123): Ctrl+X dumps
+ * External editor round-trip for the prompt input (issue #123): Ctrl+G dumps
  * the current draft into a temp file, hands the terminal to `$VISUAL` /
  * `$EDITOR` (nvim, vim, nano, `code --wait`, …), and returns the saved text
  * for the input to adopt.
@@ -16,11 +16,12 @@
  * failing restore never overrides the outcome.
  *
  * Editor resolution order mirrors readline's edit-and-execute-command:
- * `$VISUAL` → `$EDITOR` → `vi` on POSIX (always present). Windows has no
- * console-editor guarantee and `notepad` does not block, so an unresolved
- * editor there reports `unavailable` and the UI asks the user to set
- * `$EDITOR`. The variable may carry arguments (`EDITOR="code --wait"`), so
- * the command line is split quote-aware before spawning.
+ * `$VISUAL` → `$EDITOR`. There is deliberately NO fallback editor: an
+ * unresolved editor reports `unavailable` and the UI asks the user to set
+ * `$VISUAL` or `$EDITOR` (dropping someone into an unconfigured `vi` is a
+ * trap for users who don't know how to quit it). The variable may carry
+ * arguments (`EDITOR="code --wait"`), so the command line is split
+ * quote-aware before spawning.
  *
  * Windows launch: libuv resolves bare names to `.exe` on PATH but will NOT
  * execute `.cmd`/`.bat` shims (VS Code's `code` on PATH is `code.cmd`), and
@@ -37,7 +38,8 @@
  * - `edited`: the saved content differs from the draft — adopt `text`
  * - `unchanged`: the file matches the draft (modulo newline convention), or
  *   the editor exited non-zero (`:cq` abort semantics) — keep the draft
- * - `unavailable`: no editor could be resolved (Windows without `$EDITOR`)
+ * - `unavailable`: no editor could be resolved (neither `$VISUAL` nor
+ *   `$EDITOR` is set)
  * - `failed`: the editor process or the temp-file round-trip errored
  *   (`message` names the failed command or carries the fs error)
  */
@@ -59,11 +61,10 @@ export type EditorOutcome = {
 export declare function splitEditorCommand(commandLine: string): string[];
 /**
  * Resolve the editor argv from the environment. `$VISUAL` wins over
- * `$EDITOR` (readline convention); POSIX falls back to `vi`, Windows has no
- * blocking console editor fallback and returns undefined. `platform` is a
- * parameter so the Windows branch is unit-testable from CI's Linux runners.
+ * `$EDITOR` (readline convention); when neither is set there is no fallback
+ * editor — returns undefined and the caller reports `unavailable`.
  */
-export declare function resolveEditorCommand(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string[] | undefined;
+export declare function resolveEditorCommand(env?: NodeJS.ProcessEnv): string[] | undefined;
 /**
  * Windows shim resolution: a bare command like `code` usually lives on PATH
  * as `code.cmd`, which libuv refuses to execute directly. Walk PATH with

package/lib/types/utils/externalEditor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"externalEditor.d.ts","sourceRoot":"","sources":["../../../src/utils/externalEditor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAUH;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BhE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,MAAM,EAAE,GAAG,SAAS,CAOtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAqBtC;AAKD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAalD;AA8CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAsDhF"}
+{"version":3,"file":"externalEditor.d.ts","sourceRoot":"","sources":["../../../src/utils/externalEditor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAUH;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BhE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,GAAG,SAAS,CAOtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAqBtC;AAKD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAalD;AA8CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAsDhF"}

package/lib/types/utils/externalEditor.js

@@ -1,5 +1,5 @@
 /**
- * External editor round-trip for the prompt input (issue #123): Ctrl+X dumps
+ * External editor round-trip for the prompt input (issue #123): Ctrl+G dumps
  * the current draft into a temp file, hands the terminal to `$VISUAL` /
  * `$EDITOR` (nvim, vim, nano, `code --wait`, …), and returns the saved text
  * for the input to adopt.
@@ -16,11 +16,12 @@
  * failing restore never overrides the outcome.
  *
  * Editor resolution order mirrors readline's edit-and-execute-command:
- * `$VISUAL` → `$EDITOR` → `vi` on POSIX (always present). Windows has no
- * console-editor guarantee and `notepad` does not block, so an unresolved
- * editor there reports `unavailable` and the UI asks the user to set
- * `$EDITOR`. The variable may carry arguments (`EDITOR="code --wait"`), so
- * the command line is split quote-aware before spawning.
+ * `$VISUAL` → `$EDITOR`. There is deliberately NO fallback editor: an
+ * unresolved editor reports `unavailable` and the UI asks the user to set
+ * `$VISUAL` or `$EDITOR` (dropping someone into an unconfigured `vi` is a
+ * trap for users who don't know how to quit it). The variable may carry
+ * arguments (`EDITOR="code --wait"`), so the command line is split
+ * quote-aware before spawning.
  *
  * Windows launch: libuv resolves bare names to `.exe` on PATH but will NOT
  * execute `.cmd`/`.bat` shims (VS Code's `code` on PATH is `code.cmd`), and
@@ -76,17 +77,16 @@ export function splitEditorCommand(commandLine) {
 }
 /**
  * Resolve the editor argv from the environment. `$VISUAL` wins over
- * `$EDITOR` (readline convention); POSIX falls back to `vi`, Windows has no
- * blocking console editor fallback and returns undefined. `platform` is a
- * parameter so the Windows branch is unit-testable from CI's Linux runners.
+ * `$EDITOR` (readline convention); when neither is set there is no fallback
+ * editor — returns undefined and the caller reports `unavailable`.
  */
-export function resolveEditorCommand(env = process.env, platform = process.platform) {
+export function resolveEditorCommand(env = process.env) {
     const raw = (env.VISUAL ?? '').trim() || (env.EDITOR ?? '').trim();
     if (raw !== '') {
         const args = splitEditorCommand(raw);
         return args.length > 0 ? args : undefined;
     }
-    return platform === 'win32' ? undefined : ['vi'];
+    return undefined;
 }
 /**
  * Windows shim resolution: a bare command like `code` usually lives on PATH