@verboo/code 0.7.10 → 0.7.12

package/dist/cli.mjs

@@ -9712,6 +9712,12 @@ function resetTotalDurationStateAndCost_FOR_TESTS_ONLY() {
   STATE.totalCostUSD = 0;
 }
 function addToTotalCostState(cost, modelUsage, model) {
+  if (!(model in STATE.modelUsage) && Object.keys(STATE.modelUsage).length >= MAX_TRACKED_MODELS) {
+    const oldestKey = Object.keys(STATE.modelUsage)[0];
+    if (oldestKey) {
+      delete STATE.modelUsage[oldestKey];
+    }
+  }
   STATE.modelUsage[model] = modelUsage;
   STATE.totalCostUSD += cost;
 }
@@ -10480,7 +10486,7 @@ function isReplBridgeActive() {
 function getReplBridgeHandle() {
   return null;
 }
-var STATE, sessionSwitched, onSessionSwitch, interactionTimeDirty = false, outputTokensAtTurnStart = 0, currentTurnTokenBudget = null, budgetContinuationCount = 0, scrollDraining = false, scrollDrainTimer, SCROLL_DRAIN_IDLE_MS = 150, EMPTY_SLOW_OPERATIONS;
+var STATE, sessionSwitched, onSessionSwitch, MAX_TRACKED_MODELS = 200, interactionTimeDirty = false, outputTokensAtTurnStart = 0, currentTurnTokenBudget = null, budgetContinuationCount = 0, scrollDraining = false, scrollDrainTimer, SCROLL_DRAIN_IDLE_MS = 150, EMPTY_SLOW_OPERATIONS;
 var init_state = __esm(() => {
   init_sumBy();
   init_crypto();
@@ -16780,6 +16786,8 @@ function sanitizeEnvironment(env2) {
   if (!env2) {
     return {};
   }
+  const sanitized = {};
+  const droppedKeys = [];
   for (const [key, value] of Object.entries(env2)) {
     if (CONTROL_CHAR_PATTERN.test(key)) {
       return {
@@ -16787,12 +16795,20 @@ function sanitizeEnvironment(env2) {
       };
     }
     if (typeof value === "string" && CONTROL_CHAR_PATTERN.test(value)) {
-      return {
-        error: "Unsafe environment: control characters are not allowed in values"
-      };
+      droppedKeys.push(key);
+      continue;
+    }
+    sanitized[key] = value;
+  }
+  if (droppedKeys.length > 0) {
+    const newKeys = droppedKeys.filter((k) => !warnedDirtyEnvKeys.has(k));
+    if (newKeys.length > 0) {
+      for (const k of newKeys)
+        warnedDirtyEnvKeys.add(k);
+      console.warn(`[verboo] Dropping env var(s) with control characters before spawning child: ${newKeys.join(", ")}. Fix the source (likely your shell rc) to silence this.`);
     }
   }
-  return { value: env2 };
+  return { value: sanitized };
 }
 function getErrorMessage(result, errorCode) {
   if (typeof result.signal === "string") {
@@ -16961,7 +16977,7 @@ function execFileNoThrowWithCwd(file, args, {
     });
   });
 }
-var import_cross_spawn2, MS_IN_SECOND2 = 1000, SECONDS_IN_MINUTE2 = 60, DEFAULT_MAX_BUFFER = 1e6, CONTROL_CHAR_PATTERN, SAFE_BARE_EXECUTABLE_PATTERN;
+var import_cross_spawn2, MS_IN_SECOND2 = 1000, SECONDS_IN_MINUTE2 = 60, DEFAULT_MAX_BUFFER = 1e6, CONTROL_CHAR_PATTERN, SAFE_BARE_EXECUTABLE_PATTERN, warnedDirtyEnvKeys;
 var init_execFileNoThrow = __esm(() => {
   init_cwd2();
   init_log3();
@@ -16969,6 +16985,7 @@ var init_execFileNoThrow = __esm(() => {
   import_cross_spawn2 = __toESM(require_cross_spawn(), 1);
   CONTROL_CHAR_PATTERN = /[\0\r\n]/;
   SAFE_BARE_EXECUTABLE_PATTERN = /^[A-Za-z0-9_.-]+$/;
+  warnedDirtyEnvKeys = new Set;
 });
 
 // src/constants/oauth.ts
@@ -50468,8 +50485,11 @@ function logEvent() {}
 
 // src/utils/fileReadCache.ts
 class FileReadCache {
-  cache = new Map;
-  maxCacheSize = 1000;
+  cache = new L({
+    max: MAX_CACHE_ENTRIES,
+    maxSize: MAX_CACHE_BYTES,
+    sizeCalculation: (value) => Math.max(1, Buffer.byteLength(value.content))
+  });
   readFile(filePath) {
     const fs2 = getFsImplementation2();
     let stats;
@@ -50496,12 +50516,6 @@ class FileReadCache {
       encoding,
       mtime: stats.mtimeMs
     });
-    if (this.cache.size > this.maxCacheSize) {
-      const firstKey = this.cache.keys().next().value;
-      if (firstKey) {
-        this.cache.delete(firstKey);
-      }
-    }
     return { content, encoding };
   }
   clear() {
@@ -50517,10 +50531,12 @@ class FileReadCache {
     };
   }
 }
-var fileReadCache;
+var MAX_CACHE_ENTRIES = 1000, MAX_CACHE_BYTES, fileReadCache;
 var init_fileReadCache = __esm(() => {
+  init_index_min();
   init_file();
   init_fsOperations();
+  MAX_CACHE_BYTES = 64 * 1024 * 1024;
   fileReadCache = new FileReadCache;
 });
 
@@ -115502,7 +115518,7 @@ function printStartupScreen(modelOverride) {
   const home = process.env.HOME || process.env.USERPROFILE || "";
   const cwd2 = process.cwd();
   const displayCwd = home && cwd2.startsWith(home) ? `~${cwd2.slice(home.length)}` : cwd2;
-  const version2 = "0.7.10";
+  const version2 = "0.7.12";
   const bold2 = `${ESC}1m`;
   const PURPLE = rgb(...ACCENT);
   const SOFT = rgb(...CREAM);
@@ -201938,11 +201954,13 @@ function mapOpenAICompatibilityFailureToAssistantMessage(options2) {
         content: `The selected model (${options2.model}) is not available on this provider. Run ${switchCmd} to choose another model, or verify installed local models (for Ollama: ollama list).`,
         error: "invalid_request"
       });
-    case "auth_invalid":
+    case "auth_invalid": {
+      const verbooFirstParty = isVerbooMode() && isFirstPartyAnthropicBaseUrl();
       return createAssistantAPIErrorMessage({
-        content: `${API_ERROR_MESSAGE_PREFIX}: Authentication failed for your OpenAI-compatible provider. Verify OPENAI_API_KEY and endpoint-specific auth requirements.`,
+        content: verbooFirstParty ? `${API_ERROR_MESSAGE_PREFIX}: Authentication failed. ${getIsNonInteractiveSession() ? "Run `verboo /login` and retry." : "Please run /login."}` : `${API_ERROR_MESSAGE_PREFIX}: Authentication failed. Verify your provider credentials (OPENAI_API_KEY / ANTHROPIC_BASE_URL / endpoint-specific auth headers).`,
         error: "authentication_failed"
       });
+    }
     case "rate_limited":
       return createAssistantAPIErrorMessage({
         content: `${API_ERROR_MESSAGE_PREFIX}: Provider rate limit reached. Retry in a few seconds.`,
@@ -202039,10 +202057,10 @@ function getRequestTooLargeErrorMessage() {
   return getIsNonInteractiveSession() ? `Request too large (${limits}). Try with a smaller file.` : `Request too large (${limits}). Double press esc to go back and try with a smaller file.`;
 }
 function getTokenRevokedErrorMessage() {
-  return getIsNonInteractiveSession() ? "Your account does not have access to Claude. Please login again or contact your administrator." : TOKEN_REVOKED_ERROR_MESSAGE;
+  return getIsNonInteractiveSession() ? `${API_ERROR_MESSAGE_PREFIX}: OAuth token revoked. Run \`verboo /login\` to re-authenticate, or contact your administrator.` : TOKEN_REVOKED_ERROR_MESSAGE;
 }
 function getOauthOrgNotAllowedErrorMessage() {
-  return getIsNonInteractiveSession() ? "Your organization does not have access to Claude. Please login again or contact your administrator." : OAUTH_ORG_NOT_ALLOWED_ERROR_MESSAGE;
+  return getIsNonInteractiveSession() ? `${API_ERROR_MESSAGE_PREFIX}: Your organization does not have access to Verboo Code. Run \`verboo /login\` to switch accounts, or contact your administrator.` : OAUTH_ORG_NOT_ALLOWED_ERROR_MESSAGE;
 }
 function isCCRMode() {
   return isEnvTruthy(process.env.CLAUDE_CODE_REMOTE);
@@ -202414,7 +202432,7 @@ Run /share and post the JSON file to ${MACRO.FEEDBACK_CHANNEL}.`;
     }
     return createAssistantAPIErrorMessage({
       error: "authentication_failed",
-      content: getIsNonInteractiveSession() ? `Failed to authenticate. ${API_ERROR_MESSAGE_PREFIX}: ${error42.message}` : `Please run /login · ${API_ERROR_MESSAGE_PREFIX}: ${error42.message}`
+      content: getIsNonInteractiveSession() ? `${API_ERROR_MESSAGE_PREFIX}: ${error42.message} · Failed to authenticate. Run \`verboo /login\` to refresh credentials.` : `Please run /login · ${API_ERROR_MESSAGE_PREFIX}: ${error42.message}`
     });
   }
   if (isEnvTruthy(process.env.CLAUDE_CODE_USE_BEDROCK) && error42 instanceof Error && error42.message.toLowerCase().includes("model id")) {
@@ -202593,6 +202611,7 @@ var init_errors6 = __esm(() => {
   init_providers();
   init_state();
   init_apiLimits();
+  init_oauth();
   init_envUtils();
   init_format2();
   init_imageResizer();
@@ -376794,7 +376813,7 @@ function getAnthropicEnvMetadata() {
 function getBuildAgeMinutes() {
   if (false)
     ;
-  const buildTime = new Date("2026-04-30T11:00:43.858Z").getTime();
+  const buildTime = new Date("2026-05-01T21:13:05.033Z").getTime();
   if (isNaN(buildTime))
     return;
   return Math.floor((Date.now() - buildTime) / 60000);
@@ -410204,6 +410223,15 @@ async function addToPromptHistory(command) {
     sessionId: getSessionId()
   };
   pendingEntries.push(logEntry);
+  if (pendingEntries.length > MAX_PENDING_ENTRIES) {
+    pendingEntries.splice(0, pendingEntries.length - MAX_PENDING_ENTRIES);
+    if (!pendingOverflowWarned) {
+      pendingOverflowWarned = true;
+      logForDebugging2(`History pending queue exceeded ${MAX_PENDING_ENTRIES} entries — dropping oldest. Disk write likely failing.`);
+    }
+  } else if (pendingEntries.length < MAX_PENDING_ENTRIES / 2) {
+    pendingOverflowWarned = false;
+  }
   lastAddedEntry = logEntry;
   currentFlushPromise = flushPromptHistory(0);
 }
@@ -410236,7 +410264,7 @@ function removeLastFromHistory() {
     skippedTimestamps.add(entry.timestamp);
   }
 }
-var MAX_HISTORY_ITEMS = 100, MAX_PASTED_CONTENT_LENGTH = 1024, pendingEntries, isWriting = false, currentFlushPromise = null, cleanupRegistered3 = false, lastAddedEntry = null, skippedTimestamps;
+var MAX_HISTORY_ITEMS = 100, MAX_PASTED_CONTENT_LENGTH = 1024, pendingEntries, isWriting = false, currentFlushPromise = null, cleanupRegistered3 = false, lastAddedEntry = null, MAX_PENDING_ENTRIES = 1000, pendingOverflowWarned = false, skippedTimestamps;
 var init_history = __esm(() => {
   init_state();
   init_cleanupRegistry();
@@ -417321,7 +417349,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "0.7.10"
+    value: "0.7.12"
   }, {
     label: "Session name",
     value: nameValue
@@ -485271,7 +485299,7 @@ var init_bridge_kick = __esm(() => {
 var call60 = async () => {
   return {
     type: "text",
-    value: `${"99.0.0"} (built ${"2026-04-30T11:00:43.858Z"})`
+    value: `${"99.0.0"} (built ${"2026-05-01T21:13:05.033Z"})`
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -517923,6 +517951,25 @@ var init_FileEditToolDiff = __esm(() => {
 // src/hooks/useDiffInIDE.ts
 import { randomUUID as randomUUID33 } from "crypto";
 import { basename as basename50 } from "path";
+async function runAllPendingDiffCleanups() {
+  const cleanups = Array.from(pendingDiffCleanups);
+  pendingDiffCleanups.clear();
+  for (const fn of cleanups) {
+    try {
+      await fn();
+    } catch (e2) {
+      logError2(e2);
+    }
+  }
+}
+function ensureBeforeExitListener() {
+  if (beforeExitListenerInstalled)
+    return;
+  beforeExitListenerInstalled = true;
+  process.on("beforeExit", () => {
+    return runAllPendingDiffCleanups();
+  });
+}
 function useDiffInIDE({
   onChange,
   toolUseContext,
@@ -518025,11 +518072,12 @@ async function showDiffInIDE(file_path, edits, toolUseContext, tabName) {
     } catch (e2) {
       logError2(e2);
     }
-    process.off("beforeExit", cleanup);
+    pendingDiffCleanups.delete(cleanup);
     toolUseContext.abortController.signal.removeEventListener("abort", cleanup);
   }
   toolUseContext.abortController.signal.addEventListener("abort", cleanup);
-  process.on("beforeExit", cleanup);
+  pendingDiffCleanups.add(cleanup);
+  ensureBeforeExitListener();
   const ideClient = getConnectedIdeClient(toolUseContext.options.mcpClients);
   try {
     const { updatedFile } = getPatchForEdits({
@@ -518098,7 +518146,7 @@ function isRejectedMessage(data) {
 function isSaveMessage(data) {
   return Array.isArray(data) && data[0]?.type === "text" && data[0].text === "FILE_SAVED" && typeof data[1].text === "string";
 }
-var import_react207;
+var import_react207, pendingDiffCleanups, beforeExitListenerInstalled = false;
 var init_useDiffInIDE = __esm(() => {
   init_fileRead();
   init_path2();
@@ -518111,6 +518159,7 @@ var init_useDiffInIDE = __esm(() => {
   init_log3();
   init_platform2();
   import_react207 = __toESM(require_react(), 1);
+  pendingDiffCleanups = new Set;
 });
 
 // src/components/ShowInIDEPrompt.tsx
@@ -538038,6 +538087,49 @@ var init_PromptInputFooterLeftSide = __esm(() => {
 });
 
 // src/components/PromptInput/PromptInputFooter.tsx
+function ContextWindowDisplay({ messages, permissionMode }) {
+  const mainLoopModel = useMainLoopModel();
+  const exceeds200k = doesMostRecentAssistantMessageExceed200k(messages);
+  const runtimeModel = getRuntimeMainLoopModel({ permissionMode, mainLoopModel, exceeds200kTokens: exceeds200k });
+  const usage = getCurrentUsage(messages);
+  const windowSize = getContextWindowForModel(runtimeModel, getSdkBetas());
+  if (!usage) {
+    const emptyBar = "░".repeat(BAR_WIDTH);
+    const windowK2 = formatNumber(windowSize);
+    return /* @__PURE__ */ jsx_dev_runtime429.jsxDEV(ThemedText, {
+      dimColor: true,
+      children: [
+        "ctx [",
+        emptyBar,
+        "] 0/",
+        windowK2,
+        "  0%"
+      ]
+    }, undefined, true, undefined, this);
+  }
+  const { used } = calculateContextPercentages(usage, windowSize);
+  const pct = Math.round(used);
+  const filled = Math.round(pct / 100 * BAR_WIDTH);
+  const bar = "█".repeat(filled) + "░".repeat(BAR_WIDTH - filled);
+  const color3 = pct >= 90 ? "red" : pct >= 70 ? "yellow" : undefined;
+  const inputK = formatNumber(usage.input_tokens);
+  const windowK = formatNumber(windowSize);
+  return /* @__PURE__ */ jsx_dev_runtime429.jsxDEV(ThemedText, {
+    dimColor: true,
+    color: color3,
+    children: [
+      "ctx [",
+      bar,
+      "] ",
+      inputK,
+      "/",
+      windowK,
+      "  ",
+      pct,
+      "%"
+    ]
+  }, undefined, true, undefined, this);
+}
 function PromptInputFooter({
   apiKeyStatus,
   debug,
@@ -538128,6 +538220,10 @@ function PromptInputFooter({
                 lastAssistantMessageId,
                 vimMode
               }, undefined, false, undefined, this),
+              mode === "prompt" && !exitMessage.show && !isPasting && /* @__PURE__ */ jsx_dev_runtime429.jsxDEV(ContextWindowDisplay, {
+                messages,
+                permissionMode: toolPermissionContext.mode
+              }, undefined, false, undefined, this),
               /* @__PURE__ */ jsx_dev_runtime429.jsxDEV(PromptInputFooterLeftSide, {
                 exitMessage,
                 vimMode,
@@ -538212,16 +538308,22 @@ function BridgeStatusIndicator({
     ]
   }, undefined, true, undefined, this);
 }
-var import_react252, jsx_dev_runtime429, PromptInputFooter_default;
+var import_react252, jsx_dev_runtime429, BAR_WIDTH = 20, PromptInputFooter_default;
 var init_PromptInputFooter = __esm(() => {
   init_bridgeEnabled();
   init_bridgeStatusUtil();
+  init_state();
   init_promptOverlayContext();
+  init_useMainLoopModel();
   init_useSettings();
   init_useTerminalSize();
   init_ink2();
   init_AppState();
+  init_context();
+  init_format2();
   init_fullscreen();
+  init_model();
+  init_tokens();
   init_CoordinatorAgentStatus();
   init_StatusLine();
   init_Notifications();
@@ -541123,6 +541225,7 @@ class SessionsWebSocket {
   getAccessToken;
   callbacks;
   ws = null;
+  wsListeners = [];
   state = "closed";
   reconnectAttempts = 0;
   sessionNotFoundRetries = 0;
@@ -541139,6 +541242,7 @@ class SessionsWebSocket {
       logForDebugging2("[SessionsWebSocket] Already connecting");
       return;
     }
+    this.teardownCurrentSocket();
     this.state = "connecting";
     const baseUrl = getOauthConfig().BASE_API_URL.replace("https://", "wss://");
     const url4 = `${baseUrl}/v1/sessions/ws/${this.sessionId}/subscribe?organization_uuid=${this.orgUuid}`;
@@ -541148,6 +541252,22 @@ class SessionsWebSocket {
       Authorization: `Bearer ${accessToken}`,
       "anthropic-version": "2023-06-01"
     };
+    const onOpen = () => {
+      logForDebugging2("[SessionsWebSocket] Connection opened, authenticated via headers");
+      this.state = "connected";
+      this.reconnectAttempts = 0;
+      this.sessionNotFoundRetries = 0;
+      this.startPingInterval();
+      this.callbacks.onConnected?.();
+    };
+    const onError = () => {
+      const err2 = new Error("[SessionsWebSocket] WebSocket error");
+      logError2(err2);
+      this.callbacks.onError?.(err2);
+    };
+    const onPong = () => {
+      logForDebugging2("[SessionsWebSocket] Pong received");
+    };
     if (typeof Bun !== "undefined") {
       const ws = new globalThis.WebSocket(url4, {
         headers,
@@ -541155,30 +541275,26 @@ class SessionsWebSocket {
         tls: getWebSocketTLSOptions() || undefined
       });
       this.ws = ws;
-      ws.addEventListener("open", () => {
-        logForDebugging2("[SessionsWebSocket] Connection opened, authenticated via headers");
-        this.state = "connected";
-        this.reconnectAttempts = 0;
-        this.sessionNotFoundRetries = 0;
-        this.startPingInterval();
-        this.callbacks.onConnected?.();
-      });
-      ws.addEventListener("message", (event) => {
+      const onMessage2 = (event) => {
         const data = typeof event.data === "string" ? event.data : String(event.data);
         this.handleMessage(data);
-      });
-      ws.addEventListener("error", () => {
-        const err2 = new Error("[SessionsWebSocket] WebSocket error");
-        logError2(err2);
-        this.callbacks.onError?.(err2);
-      });
-      ws.addEventListener("close", (event) => {
+      };
+      const onClose = (event) => {
         logForDebugging2(`[SessionsWebSocket] Closed: code=${event.code} reason=${event.reason}`);
         this.handleClose(event.code);
-      });
-      ws.addEventListener("pong", () => {
-        logForDebugging2("[SessionsWebSocket] Pong received");
-      });
+      };
+      ws.addEventListener("open", onOpen);
+      ws.addEventListener("message", onMessage2);
+      ws.addEventListener("error", onError);
+      ws.addEventListener("close", onClose);
+      ws.addEventListener("pong", onPong);
+      this.wsListeners = [
+        { event: "open", handler: onOpen },
+        { event: "message", handler: onMessage2 },
+        { event: "error", handler: onError },
+        { event: "close", handler: onClose },
+        { event: "pong", handler: onPong }
+      ];
     } else {
       const { default: WS } = await Promise.resolve().then(() => (init_wrapper(), exports_wrapper));
       const ws = new WS(url4, {
@@ -541187,28 +541303,55 @@ class SessionsWebSocket {
         ...getWebSocketTLSOptions()
       });
       this.ws = ws;
-      ws.on("open", () => {
-        logForDebugging2("[SessionsWebSocket] Connection opened, authenticated via headers");
-        this.state = "connected";
-        this.reconnectAttempts = 0;
-        this.sessionNotFoundRetries = 0;
-        this.startPingInterval();
-        this.callbacks.onConnected?.();
-      });
-      ws.on("message", (data) => {
+      const onMessage2 = (data) => {
         this.handleMessage(data.toString());
-      });
-      ws.on("error", (err2) => {
+      };
+      const onErrorWs = (err2) => {
         logError2(new Error(`[SessionsWebSocket] Error: ${err2.message}`));
         this.callbacks.onError?.(err2);
-      });
-      ws.on("close", (code, reason) => {
+      };
+      const onCloseWs = (code, reason) => {
         logForDebugging2(`[SessionsWebSocket] Closed: code=${code} reason=${reason.toString()}`);
         this.handleClose(code);
-      });
-      ws.on("pong", () => {
-        logForDebugging2("[SessionsWebSocket] Pong received");
-      });
+      };
+      ws.on("open", onOpen);
+      ws.on("message", onMessage2);
+      ws.on("error", onErrorWs);
+      ws.on("close", onCloseWs);
+      ws.on("pong", onPong);
+      this.wsListeners = [
+        { event: "open", handler: onOpen },
+        { event: "message", handler: onMessage2 },
+        { event: "error", handler: onErrorWs },
+        { event: "close", handler: onCloseWs },
+        { event: "pong", handler: onPong }
+      ];
+    }
+  }
+  teardownCurrentSocket() {
+    const ws = this.ws;
+    const listeners = this.wsListeners;
+    this.wsListeners = [];
+    this.ws = null;
+    if (!ws)
+      return;
+    for (const { event, handler: handler7 } of listeners) {
+      try {
+        if (typeof ws.removeEventListener === "function") {
+          ws.removeEventListener(event, handler7);
+        }
+        if (typeof ws.off === "function") {
+          ws.off(event, handler7);
+        }
+      } catch {}
+    }
+    try {
+      ws.close();
+    } catch {}
+    if (typeof ws.terminate === "function") {
+      try {
+        ws.terminate();
+      } catch {}
     }
   }
   handleMessage(data) {
@@ -541228,7 +541371,7 @@ class SessionsWebSocket {
     if (this.state === "closed") {
       return;
     }
-    this.ws = null;
+    this.teardownCurrentSocket();
     const previousState = this.state;
     this.state = "closed";
     if (PERMANENT_CLOSE_CODES.has(closeCode)) {
@@ -541310,10 +541453,7 @@ class SessionsWebSocket {
       clearTimeout(this.reconnectTimer);
       this.reconnectTimer = null;
     }
-    if (this.ws) {
-      this.ws.close();
-      this.ws = null;
-    }
+    this.teardownCurrentSocket();
   }
   reconnect() {
     logForDebugging2("[SessionsWebSocket] Force reconnecting");
@@ -560929,7 +561069,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "0.7.10",
+              "0.7.12",
               " "
             ]
           }, undefined, true, undefined, this)
@@ -561116,7 +561256,7 @@ function WelcomeV2() {
           dimColor: true,
           children: [
             "v",
-            "0.7.10",
+            "0.7.12",
             " "
           ]
         }, undefined, true, undefined, this)
@@ -561332,7 +561472,7 @@ function AppleTerminalWelcomeV2(t0) {
         dimColor: true,
         children: [
           "v",
-          "0.7.10",
+          "0.7.12",
           " "
         ]
       }, undefined, true, undefined, this);
@@ -561541,7 +561681,7 @@ function AppleTerminalWelcomeV2(t0) {
       dimColor: true,
       children: [
         "v",
-        "0.7.10",
+        "0.7.12",
         " "
       ]
     }, undefined, true, undefined, this);
@@ -571727,6 +571867,7 @@ class QueryEngine {
   readFileState;
   discoveredSkillNames = new Set;
   loadedNestedMemoryPaths = new Set;
+  oversizedMessagesWarned = false;
   constructor(config3) {
     this.config = config3;
     this.mutableMessages = config3.initialMessages ?? [];
@@ -571761,6 +571902,17 @@ class QueryEngine {
       orphanedPermission
     } = this.config;
     this.discoveredSkillNames.clear();
+    const MAX_PERMISSION_DENIALS = 500;
+    if (this.permissionDenials.length > MAX_PERMISSION_DENIALS) {
+      this.permissionDenials.splice(0, this.permissionDenials.length - MAX_PERMISSION_DENIALS);
+    }
+    const MUTABLE_MESSAGES_WARN_THRESHOLD = 2000;
+    if (this.mutableMessages.length > MUTABLE_MESSAGES_WARN_THRESHOLD && !this.oversizedMessagesWarned) {
+      this.oversizedMessagesWarned = true;
+      logForDebugging2(`[QueryEngine] mutableMessages large: ${this.mutableMessages.length} entries — enable compaction to keep memory bounded`);
+    } else if (this.mutableMessages.length <= MUTABLE_MESSAGES_WARN_THRESHOLD / 2) {
+      this.oversizedMessagesWarned = false;
+    }
     setCwd(cwd3);
     const persistSession = !isSessionPersistenceDisabled();
     const startTime = Date.now();
@@ -579569,7 +579721,7 @@ __export(exports_update, {
 async function update() {
   if (getAPIProvider() !== "firstParty") {
     writeToStdout(source_default.yellow(`Auto-update is not available for third-party provider builds.
-`) + `Current version: ${"0.7.10"}
+`) + `Current version: ${"0.7.12"}
 
 ` + `To update, reinstall from npm:
 ` + source_default.bold(`  npm install -g ${"@verboo/code"}@latest`) + `
@@ -579580,7 +579732,7 @@ async function update() {
     await gracefulShutdown(0);
   }
   logEvent("tengu_update_check", {});
-  writeToStdout(`Current version: ${"0.7.10"}
+  writeToStdout(`Current version: ${"0.7.12"}
 `);
   const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
   writeToStdout(`Checking for updates to ${channel} version...
@@ -579665,8 +579817,8 @@ async function update() {
       writeToStdout(`Claude is managed by Homebrew.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.10", latest)) {
-        writeToStdout(`Update available: ${"0.7.10"} → ${latest}
+      if (latest && !gte("0.7.12", latest)) {
+        writeToStdout(`Update available: ${"0.7.12"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579682,8 +579834,8 @@ async function update() {
       writeToStdout(`Claude is managed by winget.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.10", latest)) {
-        writeToStdout(`Update available: ${"0.7.10"} → ${latest}
+      if (latest && !gte("0.7.12", latest)) {
+        writeToStdout(`Update available: ${"0.7.12"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579699,8 +579851,8 @@ async function update() {
       writeToStdout(`Claude is managed by apk.
 `);
       const latest = await getLatestVersion(channel);
-      if (latest && !gte("0.7.10", latest)) {
-        writeToStdout(`Update available: ${"0.7.10"} → ${latest}
+      if (latest && !gte("0.7.12", latest)) {
+        writeToStdout(`Update available: ${"0.7.12"} → ${latest}
 `);
         writeToStdout(`
 `);
@@ -579765,11 +579917,11 @@ async function update() {
 `);
         await gracefulShutdown(1);
       }
-      if (result.latestVersion === "0.7.10") {
-        writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.10"})`) + `
+      if (result.latestVersion === "0.7.12") {
+        writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.12"})`) + `
 `);
       } else {
-        writeToStdout(source_default.green(`Successfully updated from ${"0.7.10"} to version ${result.latestVersion}`) + `
+        writeToStdout(source_default.green(`Successfully updated from ${"0.7.12"} to version ${result.latestVersion}`) + `
 `);
         await regenerateCompletionCache();
       }
@@ -579829,12 +579981,12 @@ async function update() {
 `);
     await gracefulShutdown(1);
   }
-  if (latestVersion === "0.7.10") {
-    writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.10"})`) + `
+  if (latestVersion === "0.7.12") {
+    writeToStdout(source_default.green(`Verboo Code is up to date (${"0.7.12"})`) + `
 `);
     await gracefulShutdown(0);
   }
-  writeToStdout(`New version available: ${latestVersion} (current: ${"0.7.10"})
+  writeToStdout(`New version available: ${latestVersion} (current: ${"0.7.12"})
 `);
   writeToStdout(`Installing update...
 `);
@@ -579879,7 +580031,7 @@ async function update() {
   logForDebugging2(`update: Installation status: ${status2}`);
   switch (status2) {
     case "success":
-      writeToStdout(source_default.green(`Successfully updated from ${"0.7.10"} to version ${latestVersion}`) + `
+      writeToStdout(source_default.green(`Successfully updated from ${"0.7.12"} to version ${latestVersion}`) + `
 `);
       await regenerateCompletionCache();
       break;
@@ -581932,7 +582084,7 @@ Usage: verboo --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version(`0.7.10 (${cliDesc})`, "-v, --version", "Output the version number");
+  }).version(`0.7.12 (${cliDesc})`, "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -582500,7 +582652,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"0.7.10"} (Verboo Code)`);
+    console.log(`${"0.7.12"} (Verboo Code)`);
     return;
   }
   if (args.includes("--provider")) {
@@ -582656,4 +582808,4 @@ async function main2() {
 }
 main2();
 
-//# debugId=3383BFF91396D01764756E2164756E21
+//# debugId=B566AA3C880BEEFC64756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verboo/code",
-  "version": "0.7.10",
+  "version": "0.7.12",
   "description": "Verboo Code — coding agent for the Verboo platform",
   "type": "module",
   "bin": {