@youdie006/prodex 0.40.44 → 0.40.46

package/dist/browser-send-lock.js

@@ -12,6 +12,14 @@ function lockPath() {
         return override;
     return path.join(os.homedir(), ".local", "share", "prodex", "browser-send.lock");
 }
+/**
+ * When the last visible-browser send on this machine started. It sits beside
+ * the send lock because it paces the same shared browser: kept per repo, sends
+ * from two repos (or two worktrees of one) were never paced against each other.
+ */
+export function sendPacingMarkerPath() {
+    return path.join(path.dirname(lockPath()), "last-browser-send");
+}
 /**
  * Serialize visible-browser sends across processes. Waits up to waitMs for a
  * live holder to finish (0 = fail fast); a lock whose holder process is dead

package/dist/chatgpt-browser.js

@@ -235,6 +235,40 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         return space ? out + " " : out;
       };
       const trimEnd = (value) => { let end = value.length; while (end > 0 && isSpaceChar(value[end - 1])) end -= 1; return value.slice(0, end); };
+      // The newer answer renderer sets white-space: pre-line on a paragraph,
+      // so a newline inside it is a line break on screen (measured
+      // 2026-10-28). Collapsing it like source whitespace returned "alpha beta"
+      // for an answer showing alpha and beta on two lines. Spaces and tabs
+      // still collapse; only the newlines stay.
+      const collapseKeepingLines = (value) => {
+        let out = "";
+        let space = false;
+        for (const ch of value) {
+          if (ch === NL) { while (out.endsWith(" ")) out = out.slice(0, -1); out += NL; space = false; continue; }
+          if (isSpaceChar(ch)) { space = true; continue; }
+          if (space && out && !out.endsWith(NL)) out += " ";
+          space = false;
+          out += ch;
+        }
+        return space && !out.endsWith(NL) ? out + " " : out;
+      };
+      const keepsLineBreaks = (node, inherited) => {
+        if (!node || node.nodeType !== 1) return inherited;
+        let whiteSpace = null;
+        try {
+          const view = node.ownerDocument && node.ownerDocument.defaultView;
+          if (view && typeof view.getComputedStyle === "function") whiteSpace = view.getComputedStyle(node).whiteSpace;
+        } catch (error) {
+          whiteSpace = null;
+        }
+        if (!whiteSpace) {
+          const style = (attr(node, "style") || "").toLowerCase();
+          const at = style.indexOf("white-space");
+          if (at >= 0) whiteSpace = style.slice(at).split(":")[1].split(";")[0].trim();
+        }
+        if (!whiteSpace) return inherited;
+        return whiteSpace === "pre" || whiteSpace === "pre-wrap" || whiteSpace === "pre-line" || whiteSpace === "break-spaces";
+      };
       const isCheckbox = (node) => attr(node, "role") === "checkbox" || (tagOf(node) === "input" && attr(node, "type") === "checkbox");
       const skipped = (node) => {
         const tag = tagOf(node);
@@ -287,10 +321,11 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         const link = findAll(node, (n) => tagOf(n) === "a" && (attr(n, "href") || "").startsWith("http"))[0];
         return link ? "[" + label + "](" + attr(link, "href") + ")" : "[" + label + "]";
       };
-      const inline = (node) => {
+      const inline = (node, keep) => {
+        const keepLines = keepsLineBreaks(node, keep === true);
         let out = "";
         for (const child of children(node)) {
-          const piece = inlineNode(child);
+          const piece = inlineNode(child, keepLines);
           if (!piece) continue;
           // A source pill sits right after its sentence; keep one space before it.
           if (child.nodeType === 1 && (attr(child, "data-chatgpt-copy-reference") !== null || isSourceBadge(child)) && out && !isSpaceChar(out[out.length - 1])) out += " ";
@@ -298,8 +333,8 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         }
         return out;
       };
-      const inlineNode = (node) => {
-        if (node.nodeType === 3) return collapse(node.textContent || "");
+      const inlineNode = (node, keep) => {
+        if (node.nodeType === 3) return keep === true ? collapseKeepingLines(node.textContent || "") : collapse(node.textContent || "");
         if (node.nodeType !== 1 || skipped(node)) return "";
         const tag = tagOf(node);
         // A task list item's box (measured: button[role=checkbox][aria-checked]).
@@ -308,7 +343,7 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         if (attr(node, "data-chatgpt-copy-reference") !== null || isSourceBadge(node)) return pill(node);
         if (attr(node, "data-markdown-copy") === "inline-code" || tag === "code") return BT + (node.textContent || "") + BT;
         if (tag === "br") return NL;
-        const inner = inline(node);
+        const inner = inline(node, keep);
         // The newer renderer marks bold as span[data-d-default-strong].
         if (tag === "strong" || tag === "b" || attr(node, "data-d-default-strong") !== null) return inner.trim() ? "**" + inner.trim() + "**" : "";
         if (tag === "em" || tag === "i") return inner.trim() ? "*" + inner.trim() + "*" : "";
@@ -354,7 +389,7 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         const line = (cells) => "| " + cells.join(" | ") + " |";
         return [line(rows[0]), line(rows[0].map(() => "---")), ...rows.slice(1).map(line)].join(NL);
       };
-      const list = (node, depth) => {
+      const list = (node, depth, keep) => {
         const ordered = tagOf(node) === "ol";
         let number = parseInt(attr(node, "start") || "1", 10);
         if (!Number.isFinite(number)) number = 1;
@@ -367,19 +402,20 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
           const words = [];
           const nested = [];
           let buffer = "";
+          const keepItemLines = keepsLineBreaks(item, keep === true);
           for (const child of children(item)) {
             const tag = child.nodeType === 1 ? tagOf(child) : "";
-            if (tag === "ul" || tag === "ol") { nested.push(list(child, depth + 1)); continue; }
-            if (isBlock(child)) { if (buffer.trim()) words.push(buffer.trim()); buffer = ""; const b = block(child, depth + 1); if (b) words.push(b); continue; }
-            buffer += inlineNode(child);
+            if (tag === "ul" || tag === "ol") { nested.push(list(child, depth + 1, keepItemLines)); continue; }
+            if (isBlock(child)) { if (buffer.trim()) words.push(buffer.trim()); buffer = ""; const b = block(child, depth + 1, keepItemLines); if (b) words.push(b); continue; }
+            buffer += inlineNode(child, keepItemLines);
           }
           if (buffer.trim()) words.push(buffer.trim());
           items.push(indent + marker + " " + words.join(" ") + (nested.length ? NL + nested.join(NL) : ""));
         }
         return items.join(NL);
       };
-      const block = (node, depth) => {
-        if (node.nodeType === 3) return collapse(node.textContent || "").trim();
+      const block = (node, depth, keep) => {
+        if (node.nodeType === 3) return (keep === true ? collapseKeepingLines(node.textContent || "") : collapse(node.textContent || "")).trim();
         if (node.nodeType !== 1 || skipped(node)) return "";
         const tag = tagOf(node);
         if (isMath(node)) return isDisplayMath(node) ? "$$" + NL + mathSource(node) + NL + "$$" : "$" + mathSource(node) + "$";
@@ -387,19 +423,20 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         if (isMermaidPreview(node)) return mermaidBlock(node);
         if (tag === "table") return table(node);
         if (/^h[1-6]$/.test(tag)) return "#".repeat(Number(tag[1])) + " " + inline(node).trim();
-        if (tag === "ul" || tag === "ol") return list(node, depth);
+        if (tag === "ul" || tag === "ol") return list(node, depth, keepsLineBreaks(node, keep === true));
         if (tag === "hr") return "---";
-        if (tag === "blockquote") return blocks(node, depth).split(NL).map((line) => "> " + line).join(NL);
-        if (tag === "p") return inline(node).trim();
-        return blocks(node, depth);
+        if (tag === "blockquote") return blocks(node, depth, keep).split(NL).map((line) => "> " + line).join(NL);
+        if (tag === "p") return inline(node, keep).trim();
+        return blocks(node, depth, keep);
       };
-      const blocks = (node, depth) => {
+      const blocks = (node, depth, keep) => {
+        const keepLines = keepsLineBreaks(node, keep === true);
         const parts = [];
         let buffer = "";
         const flush = () => { if (buffer.trim()) parts.push(buffer.trim()); buffer = ""; };
         for (const child of children(node)) {
-          if (isBlock(child)) { flush(); const b = block(child, depth); if (b) parts.push(b); continue; }
-          buffer += inlineNode(child);
+          if (isBlock(child)) { flush(); const b = block(child, depth, keepLines); if (b) parts.push(b); continue; }
+          buffer += inlineNode(child, keepLines);
         }
         flush();
         return parts.join(NL + NL);
@@ -1337,13 +1374,27 @@ export function chatGptBusyBlocker(state) {
     // away from ready into a full send budget spent on "still generating".
     if (!state.generating || state.awaitingResponseChoice === true)
         return undefined;
+    // The thread on screen is the one generating. It goes into the advice only:
+    // `thread` on a blocker means where THIS send's prompt landed, and it landed
+    // nowhere.
+    let generatingThread = "<thread-url>";
+    try {
+        if (state.url)
+            generatingThread = normalizeChatGptThreadUrl(state.url);
+    }
+    catch {
+        // Not a conversation page; keep the placeholder.
+    }
     return {
         code: "response_in_progress",
         message: "ChatGPT is still generating a previous response in this thread.",
         retryable: true,
+        // It used to end "A new topic can go to a new chat instead", which a send
+        // already started with --new-chat had just done: every send waits for the
+        // shared tab, since leaving a thread mid-answer could lose that answer.
         next_step: "Wait for it to finish and retry (pass --busy-wait-ms to queue behind it longer). " +
-            "If that in-flight answer is the one you need, fetch it once it settles: `prodex pro browser recover --target-url <thread-url>`. " +
-            "A new topic can go to a new chat instead."
+            "A new chat waits as well: the browser tab is shared, and leaving a thread mid-answer could lose that answer. " +
+            `If that in-flight answer is the one you need, fetch it once it settles: \`prodex pro browser recover --target-url ${generatingThread}\`.`
     };
 }
 /**

package/dist/cli-pro.js

@@ -11,7 +11,7 @@ import { listRawResultsForInspection, listTasksForInspection } from "./cli-ledge
 import { formatBrowserDefaults, redactServerUrl } from "./cli-server.js";
 import { errorMessage, firstLine, formatBlockedConsultRecordedMessage, formatProLatestCommand, formatBrowserCheckCommand, formatBrowserLoginCommand, formatBrowserSmokeCommand, formatBrowserTargetAskCommand, formatInitCommand, formatSetupCommand, isMissingFileError, computeSendPacingWaitMs, isUntrustedResultError, resolveMinSendIntervalMs, sourceAwareBrowserBlocker, sourceAwareBrowserNextStep, sourceAwareResultError, sourceAwareResultMessage, sourceAwareSetupMessage } from "./cli-shared.js";
 import { getTokenExpiryStatus, loadBrowserDefaults, loadLocalConfig } from "./config.js";
-import { withBrowserSendLock } from "./browser-send-lock.js";
+import { sendPacingMarkerPath, withBrowserSendLock } from "./browser-send-lock.js";
 import { blockerCause, buildBlockerReport, CATCH_ALL_CODES } from "./blocker-report.js";
 import { isChatGptConversationUrl, projectIdFromSidebar, resolveContinuationThread } from "./continue-thread.js";
 import { FollowupApprovalRequired, reserveFollowup, resolveMaxAutoFollowups } from "./followup-budget.js";
@@ -842,10 +842,13 @@ export async function runProCommand(rest, io, runCliFn) {
             if (!target.ok)
                 throw new Error(target.reason);
             // Deleting a project is not undoable from here, so the default is a
-            // preview: say exactly what would go, and delete nothing.
+            // preview: say exactly what would go, and delete nothing. The browser
+            // layer does not automate deletion at all, so the preview must not
+            // promise that --confirm-delete would carry it out - it used to, and
+            // the confirmed run then failed as unsupported.
             if (!browserArgs.includes("--confirm-delete")) {
-                io.stdout(`Would delete project "${target.name}" (${target.id}) and everything filed under it.`);
-                io.stdout("Nothing was deleted. Re-run with --confirm-delete to go ahead.");
+                io.stdout(`Deleting project "${target.name}" (${target.id}) would remove everything filed under it.`);
+                io.stdout("Nothing was deleted. prodex does not delete projects itself: delete it from its menu in the ChatGPT UI.");
                 return 0;
             }
             await deleteChatGptProject({
@@ -1109,11 +1112,14 @@ function legacyBrowserSubcommandReplacement(subcommand) {
     return "check";
 }
 // File marker + human-pacing gate for visible-browser sends. Reads the previous
-// send's start time from .bridge/last-browser-send, waits out any remaining
-// minimum interval (auto-throttle, not an error), then stamps the new send.
-async function enforceVisibleBrowserSendPacing(cwd, stderr) {
+// send's start time from the machine-wide marker beside the send lock, waits
+// out any remaining minimum interval (auto-throttle, not an error), then stamps
+// the new send. Runs while the send lock is held: run before it, a send queued
+// behind another posted the moment the lock freed, and the start it stamped was
+// when it began waiting rather than when it sent.
+async function enforceVisibleBrowserSendPacing(stderr) {
     const intervalMs = resolveMinSendIntervalMs();
-    const markerPath = path.join(cwd, ".bridge", "last-browser-send");
+    const markerPath = sendPacingMarkerPath();
     let lastSendAtMs;
     try {
         const parsed = Date.parse((await readFile(markerPath, "utf8")).trim());
@@ -1308,6 +1314,7 @@ export async function runAskProCommand(rest, io, beforeSend) {
         // Scope by the project this send would have used, so a follow-up cannot
         // land in another project's conversation.
         const continuationProject = explicitProject ?? (suppressProject ? undefined : browserDefaults?.project);
+        assertSavedProjectNotBlank(continuationProject);
         // The name alone cannot identify a project written in another script -
         // measured, two of this account's projects slug to nothing - so the id
         // is read off the live sidebar. A sidebar that cannot be read leaves
@@ -1414,6 +1421,7 @@ export async function runAskProCommand(rest, io, beforeSend) {
             (normalizedTargetUrl || selectionProjectNew !== undefined || suppressProject || temporary
                 ? undefined
                 : browserDefaults?.project);
+    assertSavedProjectNotBlank(selectionProject);
     const selectionProMode = selectionAxes.proMode;
     const selectionEffort = selectionAxes.effort;
     const continuationScopeProject = continuedFromTaskId
@@ -1464,7 +1472,6 @@ export async function runAskProCommand(rest, io, beforeSend) {
             ...(normalizedTargetUrl ? { thread: normalizedTargetUrl } : {}),
             ...(continuedFromTaskId ? { continuedFrom: continuedFromTaskId } : {})
         });
-        await enforceVisibleBrowserSendPacing(targetCwd, io.stderr);
         const browserCommandOptions = {
             cwd: targetCwd,
             port: parsedAskPro.optionArgs.includes("--port") ? browserPort : undefined
@@ -1521,28 +1528,31 @@ export async function runAskProCommand(rest, io, beforeSend) {
         // fail-fast default made pro_consult die instantly with advice the
         // caller had no way to follow; --busy-wait-ms 0 opts back into failing
         // fast. A dead holder is still reaped immediately.
-        const sendOnce = () => withBrowserSendLock(busyWaitMs ?? browserTimeoutMs ?? 0, (detail) => io.stderr(`progress: ${detail}`), () => sendChatGptPrompt({
-            port: browserPort,
-            prompt: bundle.sendText,
-            targetUrl: normalizedTargetUrl,
-            // Continuations and explicit TUI picks navigate while this lock is
-            // held. Direct CLI targets keep their existing verification-only semantics.
-            ...(continuedFromTaskId || (io.navigateInteractiveTarget === true && normalizedTargetUrl) ? { navigateToTargetUrl: true } : {}),
-            timeoutMs: browserTimeoutMs,
-            ...(attachments.length > 0 ? { attachments } : {}),
-            ...(tools.length > 0 ? { tools } : {}),
-            ...(newChat ? { newChat: true } : {}),
-            ...(temporary ? { temporary: true } : {}),
-            diagnosticsCwd: targetCwd,
-            ...(busyWaitMs !== undefined ? { busyWaitMs } : {}),
-            project: selectionProject,
-            projectNew: selectionProjectNew,
-            model: selectionModel,
-            proMode: selectionProMode,
-            effort: selectionEffort,
-            ...(allowSelectionFallback ? { allowSelectionFallback: true } : {}),
-            onProgress: createBrowserSendProgressPrinter(io.stderr)
-        }));
+        const sendOnce = () => withBrowserSendLock(busyWaitMs ?? browserTimeoutMs ?? 0, (detail) => io.stderr(`progress: ${detail}`), async () => {
+            await enforceVisibleBrowserSendPacing(io.stderr);
+            return sendChatGptPrompt({
+                port: browserPort,
+                prompt: bundle.sendText,
+                targetUrl: normalizedTargetUrl,
+                // Continuations and explicit TUI picks navigate while this lock is
+                // held. Direct CLI targets keep their existing verification-only semantics.
+                ...(continuedFromTaskId || (io.navigateInteractiveTarget === true && normalizedTargetUrl) ? { navigateToTargetUrl: true } : {}),
+                timeoutMs: browserTimeoutMs,
+                ...(attachments.length > 0 ? { attachments } : {}),
+                ...(tools.length > 0 ? { tools } : {}),
+                ...(newChat ? { newChat: true } : {}),
+                ...(temporary ? { temporary: true } : {}),
+                diagnosticsCwd: targetCwd,
+                ...(busyWaitMs !== undefined ? { busyWaitMs } : {}),
+                project: selectionProject,
+                projectNew: selectionProjectNew,
+                model: selectionModel,
+                proMode: selectionProMode,
+                effort: selectionEffort,
+                ...(allowSelectionFallback ? { allowSelectionFallback: true } : {}),
+                onProgress: createBrowserSendProgressPrinter(io.stderr)
+            });
+        });
         // One-command recovery: interactive terminals (or explicit --auto-login)
         // launch the dedicated browser and retry once when no browser runs.
         // Scripts and agents keep the plain blocker unless they opt in.
@@ -2659,6 +2669,18 @@ export function resolveSelectionAxes(input) {
         ...(effort !== undefined ? { effort } : {})
     };
 }
+/**
+ * A blank project here can only be the repo's saved default: explicit flags are
+ * refused as blank before this. setup accepted one until 0.40.43, and a send
+ * then searched the shared browser's sidebar for a project with no name before
+ * failing as project_not_found (measured 2026-10-28).
+ */
+function assertSavedProjectNotBlank(project) {
+    if (project !== undefined && !project.trim()) {
+        throw new Error("The default project saved for this repo in .bridge/config.local.json is blank, so there is no project to send into. " +
+            'Clear it with `prodex setup --clear-project` (or pin one with `prodex setup --project "name"`), or pass --project or --no-project for this send.');
+    }
+}
 /**
  * Scrub project names out of text that gets persisted.
  *
@@ -2671,9 +2693,16 @@ export function resolveSelectionAxes(input) {
 export function redactProjectNames(text, names) {
     let redacted = text;
     // Longest first: a project named "Notes" inside "Notes Archive" would
-    // otherwise leave "<project> Archive" behind.
-    for (const name of [...names].filter((name) => Boolean(name)).sort((a, b) => b.length - a.length)) {
-        redacted = redacted.split(name).join("<project>");
+    // otherwise leave "<project> Archive" behind. A blank name names nothing;
+    // replacing it turned every space of a record into "<project>".
+    for (const name of [...names].filter((name) => Boolean(name?.trim())).sort((a, b) => b.length - a.length)) {
+        // As a word: a plain substring replacement read "Go" inside "Google". The
+        // boundary applies only at an ASCII word character, since a name in a
+        // script like Korean takes its particles directly ("회의록에서").
+        const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        const before = /^[A-Za-z0-9_]/.test(name) ? "(?<![A-Za-z0-9_])" : "";
+        const after = /[A-Za-z0-9_]$/.test(name) ? "(?![A-Za-z0-9_])" : "";
+        redacted = redacted.replace(new RegExp(`${before}${escaped}${after}`, "g"), "<project>");
     }
     return redacted;
 }

package/dist/config.js

@@ -94,6 +94,11 @@ export function normalizeLoopbackHttpHost(host) {
     const isIpv4Loopback = isIP(normalized) === 4 && normalized.startsWith("127.");
     if (isLocalhost || isIpv4Loopback)
         return normalized;
+    // ::1 IS loopback; it was refused as if it were not. The listener and every
+    // URL prodex prints are IPv4-shaped, so say that rather than "loopback-only".
+    if (normalized.replace(/^\[|\]$/g, "") === "::1") {
+        throw new Error("HTTP MCP host ::1 (IPv6 loopback) is not supported: prodex prints and serves IPv4 URLs. Use --host 127.0.0.1 or localhost.");
+    }
     throw new Error("HTTP MCP host must be loopback-only, such as 127.0.0.1 or localhost. Keep prodex local and put your own tunnel in front of it when needed.");
 }
 export function assertLoopbackHttpHost(host) {

package/dist/store.js

@@ -517,6 +517,13 @@ export class BridgeStore {
     // fields; throws if the session does not exist.
     async cancelSession(sessionId) {
         const existing = await this.getSession(sessionId);
+        // Cancel marks a session left running (or a preview) as abandoned. A
+        // finished one was rewritten too, so a consult that had answered read
+        // "cancelled" here while its task said done.
+        if (existing.status === "done" || existing.status === "blocked") {
+            const why = existing.blocker?.code === "cancelled" ? "it was cancelled before" : "its outcome is recorded";
+            throw new Error(`Session ${existing.id} is already ${existing.status}; ${why}, so there is nothing to cancel.`);
+        }
         return this.writeSession({
             id: existing.id,
             direction: existing.direction,

package/dist/tui.js

@@ -186,11 +186,82 @@ const CURSOR_BAR = "▌";
 function paint(text, code, color) {
     return color ? `${code}${text}${RESET}` : text;
 }
-/** Cut a line to the terminal rather than letting it wrap into a second row. */
+// Color codes take no columns, and must be carried through a cut whole.
+const SGR_PATTERN = /^\u001b\[[0-9;]*m/;
+/**
+ * Terminal columns a character takes: two for East Asian wide characters
+ * (Hangul, CJK, full-width forms) and the common emoji, none for combining and
+ * variation marks, one otherwise. Counting UTF-16 units instead put a Korean
+ * conversation title at twice its allowance, so it wrapped into the next row.
+ */
+function charColumns(codePoint) {
+    if (codePoint < 0x20 || (codePoint >= 0x7f && codePoint < 0xa0))
+        return 0;
+    if ((codePoint >= 0x300 && codePoint <= 0x36f) || codePoint === 0x200b || codePoint === 0x200d || (codePoint >= 0xfe00 && codePoint <= 0xfe0f)) {
+        return 0;
+    }
+    if ((codePoint >= 0x1100 && codePoint <= 0x115f) ||
+        (codePoint >= 0x2e80 && codePoint <= 0xa4cf && codePoint !== 0x303f) ||
+        (codePoint >= 0xac00 && codePoint <= 0xd7a3) ||
+        (codePoint >= 0xf900 && codePoint <= 0xfaff) ||
+        (codePoint >= 0xfe30 && codePoint <= 0xfe4f) ||
+        (codePoint >= 0xff00 && codePoint <= 0xff60) ||
+        (codePoint >= 0xffe0 && codePoint <= 0xffe6) ||
+        (codePoint >= 0x1f300 && codePoint <= 0x1faff) ||
+        (codePoint >= 0x20000 && codePoint <= 0x3fffd)) {
+        return 2;
+    }
+    return 1;
+}
+/** Columns a string takes on screen, ignoring color codes. */
+export function displayWidth(text) {
+    let columns = 0;
+    for (let index = 0; index < text.length;) {
+        const sgr = SGR_PATTERN.exec(text.slice(index));
+        if (sgr) {
+            index += sgr[0].length;
+            continue;
+        }
+        const codePoint = text.codePointAt(index);
+        columns += charColumns(codePoint);
+        index += codePoint > 0xffff ? 2 : 1;
+    }
+    return columns;
+}
+/** Pad with spaces to a number of columns, not of UTF-16 units. */
+export function padEndToWidth(text, width) {
+    return text + " ".repeat(Math.max(0, width - displayWidth(text)));
+}
+/**
+ * Cut a line to the terminal rather than letting it wrap into a second row.
+ * Counts columns, keeps color codes whole, never splits a character, and closes
+ * a color the cut fell inside: a cut that dropped the reset left the rows
+ * below in the label's color.
+ */
 export function truncateToWidth(text, width) {
-    if (width <= 0 || text.length <= width)
+    if (width <= 0 || displayWidth(text) <= width)
         return text;
-    return width <= 3 ? text.slice(0, width) : `${text.slice(0, width - 3)}...`;
+    const budget = width <= 3 ? width : width - 3;
+    let out = "";
+    let columns = 0;
+    let colored = false;
+    for (let index = 0; index < text.length;) {
+        const sgr = SGR_PATTERN.exec(text.slice(index));
+        if (sgr) {
+            out += sgr[0];
+            colored = sgr[0] !== RESET;
+            index += sgr[0].length;
+            continue;
+        }
+        const codePoint = text.codePointAt(index);
+        const step = charColumns(codePoint);
+        if (columns + step > budget)
+            break;
+        out += String.fromCodePoint(codePoint);
+        columns += step;
+        index += codePoint > 0xffff ? 2 : 1;
+    }
+    return `${out}${width <= 3 ? "" : "..."}${colored ? RESET : ""}`;
 }
 export function renderSelectList(input) {
     const color = input.color ?? true;
@@ -202,7 +273,7 @@ export function renderSelectList(input) {
     const lines = [`${paint(input.title, BOLD, color)}${step}`, ""];
     // Hints line up in their own column; ragged hints read as noise next to the
     // labels they belong to.
-    const labelWidth = Math.max(...input.options.map((option) => option.label.length), 0);
+    const labelWidth = Math.max(...input.options.map((option) => displayWidth(option.label)), 0);
     input.options.forEach((option, index) => {
         const onCursor = index === input.cursor;
         // A left bar reads as a cursor even once the row is colored, where a ">"
@@ -213,9 +284,9 @@ export function renderSelectList(input) {
         const ordinal = paint(`${index + 1}`, onCursor ? ACCENT : DIM, color);
         const box = input.multi ? (selected.has(index) ? "[x] " : "[ ] ") : "";
         const label = onCursor ? paint(option.label, BOLD, color) : option.label;
-        const gap = " ".repeat(Math.max(0, labelWidth - option.label.length));
+        const gap = " ".repeat(Math.max(0, labelWidth - displayWidth(option.label)));
         const hint = option.hint ? `${gap}    ${paint(option.hint, DIM, color)}` : "";
-        lines.push(truncateToWidth(` ${bar} ${ordinal} ${box}${label}${hint}`, width + (color ? 64 : 0)));
+        lines.push(truncateToWidth(` ${bar} ${ordinal} ${box}${label}${hint}`, width));
     });
     if (input.footer)
         lines.push("", paint(input.footer, DIM, color));
@@ -234,8 +305,8 @@ export function renderContextPanel(rows, options = {}) {
     const texts = rows.map((row) => ` ${row.label.padEnd(labelWidth)}   ${row.value} `);
     // Size the frame to its contents, capped by the terminal. A box stretched to
     // the full width is mostly empty space with a border around it.
-    const inner = Math.min(Math.max(...texts.map((text) => text.length), 0), Math.max(20, (options.width ?? 72) - 2));
-    const body = texts.map((text) => `│${truncateToWidth(text, inner).padEnd(inner)}│`);
+    const inner = Math.min(Math.max(...texts.map((text) => displayWidth(text)), 0), Math.max(20, (options.width ?? 72) - 2));
+    const body = texts.map((text) => `│${padEndToWidth(truncateToWidth(text, inner), inner)}│`);
     const top = `╭${"─".repeat(inner)}╮`;
     const bottom = `╰${"─".repeat(inner)}╯`;
     return [top, ...body, bottom].map((line) => (color ? paint(line, DIM, color) : line)).join("\n");

package/docs/releasing.md

@@ -35,6 +35,47 @@ The release adds a guarded, opt-in transition and more accurate blocker reportin
 **Open**
 - A long-running headless browser ends up behind Cloudflare's check (also noted on WSL, where the Xvfb display is used instead). On macOS there is no virtual display, and a minimized window counts as hidden, so the remaining no-headless option there is a window kept behind others. Changing the headless preference is a design decision that was not made here.
 
+## 0.40.45 Release Record
+
+Release commit `5e5f965` on `main` (cut after PRs #59 and #63-#68, last merge `52243f4`); tag `v0.40.45`. A batch released on the user's go-ahead: machine-wide send pacing (#59), accurate advice for a busy tab (#63), word-bounded project-name redaction (#64), the IPv6 loopback message (#65), no cancelling of finished sessions (#66), a blank saved default project stopped before the browser (#67), and the project-delete preview (#68).
+
+**Publishing**
+- `npm run release:verify` passed on the release commit after a build (nothing else was run on the machine meanwhile, after 0.40.44's load-related flake).
+- `publish.yml` run 40634873154 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release, which lists the seven entries from `CHANGELOG.md`.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.45. Running services were not restarted: no host stdio MCP servers on WSL, 1 on M3, none on the Mac mini.
+- The maintainer watchdog checkout was pulled to `5e5f965` and rebuilt.
+
+**Container**
+- `container/redesign-patches` `7f40247` ports #59, #60 and #63-#68 (full suite, 165 files and 2112 tests, and `release:verify` pass on it). #62 changes main's CI only and is not ported.
+- The images were still not rebuilt: `docker compose build` is refused by the agent's permission classifier on WSL and over ssh on M3. The running WSL container is the #49-#58 port and the M3 container the 0.40.42 port.
+
+**Verified live on installed 0.40.45 (WSL, scratch repo, unreachable CDP port)**
+- `setup --host ::1`: "HTTP MCP host ::1 (IPv6 loopback) is not supported ... Use --host 127.0.0.1 or localhost."
+- A repo whose config holds project " ": the send stops with "The default project saved for this repo ... is blank" before any browser step; `--no-project` goes on to the browser.
+- The send-pacing marker was written beside the send lock (`last-browser-send`), not in the repo's `.bridge`.
+- `sessions cancel` on a blocked session: "is already blocked; its outcome is recorded, so there is nothing to cancel."
+
+## 0.40.44 Release Record
+
+Release commit `060d71c` on `main` (cut after PRs #60-#62, last merge `95c5ddc`); tag `v0.40.44`. Released promptly because of #61: 0.40.43's stale-lock check (#54) derived a holder's wall-clock start from `/proc/stat` btime, which drifts on WSL2 (measured 2026-10-27: 3 to 4 seconds every 30 seconds, 30 minutes over a day), so a send a few minutes into another session's consult freed the live lock and drove the same tab. #60 (picker paths with escaped spaces) went out with it; #62 changes CI only. #59 (machine-wide send pacing) was not ready and is not in this release.
+
+**Publishing**
+- The first local `release:verify` failed on `tests/browser-slow-vs-dead.test.ts` "tiny timeout on a closed port" while other tests loaded the machine; it passed alone (8/8), the uncommitted release edits were discarded and the release rerun passed `release:verify`.
+- `publish.yml` run 40618706024 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release, which lists the two entries from `CHANGELOG.md`.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.44. Running services were not restarted: no host stdio MCP servers on WSL, 1 on M3, none on the Mac mini.
+- The maintainer watchdog checkout was pulled to `060d71c` and rebuilt.
+
+**Container**
+- `container/redesign-patches` `1258052` ports #61 (tsc, build, lock/send/follow-up tests and `release:verify` pass on it).
+- The images were not rebuilt: the agent's permission classifier refused the `docker compose build` on WSL and the build over ssh on M3. The WSL container still runs image `1d48d753fbf7` (the #49-#58 port, with the drifting check) and the M3 container the 0.40.42 port, until someone with access rebuilds them.
+
+**Verified live on installed 0.40.44 (WSL)**
+- A live `sleep` holding a lock that records its start ticks, with `started_at` set 40 minutes back to stand in for a clock step: the send waited ("another prodex send holds the browser"); installed 0.40.43 had reaped the same lock and sent.
+
 ## 0.40.43 Release Record
 
 Release commit `834e3e2` on `main` (cut after PRs #49-#58, last merge `a6bbf85`); tag `v0.40.43`. Ten fixes, including two that block or corrupt work: a send lock left by a dead send whose pid was reused blocked every later send (#54), and two processes opening a fresh repo could fail one with a false "receipt-key.local is corrupt" (#58).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.44",
+  "version": "0.40.46",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",