jeo-code 0.4.7 → 0.4.8

package/README.ja.md

@@ -150,11 +150,11 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 ## 変更履歴 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.8]** (2026-06-14) — Live-frame stability: constant-height live turn, renderer self-heal off-by-one fix, and frame-safe child-stdout sanitizing — no more duplicate model bar or torn escapes.
 - **[0.4.7]** (2026-06-14) — Detached subagents + `subagent` control tool, live shaded in-flight output, registry-driven providers, fuller `read` budget, styled italics in the final report, and `gjc` retired.
 - **[0.4.6]** (2026-06-14) — Width-correct forge cards for CJK/emoji, red borders on failed tool cards, aligned `ooo ralph` monitor HUD, and a per-theme user-card palette.
 - **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
-- **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -150,11 +150,11 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 ## 변경 이력 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.8]** (2026-06-14) — Live-frame stability: constant-height live turn, renderer self-heal off-by-one fix, and frame-safe child-stdout sanitizing — no more duplicate model bar or torn escapes.
 - **[0.4.7]** (2026-06-14) — Detached subagents + `subagent` control tool, live shaded in-flight output, registry-driven providers, fuller `read` budget, styled italics in the final report, and `gjc` retired.
 - **[0.4.6]** (2026-06-14) — Width-correct forge cards for CJK/emoji, red borders on failed tool cards, aligned `ooo ralph` monitor HUD, and a per-theme user-card palette.
 - **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
-- **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -150,11 +150,11 @@ Required npm token permissions (repository secret `NPM_TOKEN`):
 ## Changelog
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.8]** (2026-06-14) — Live-frame stability: constant-height live turn, renderer self-heal off-by-one fix, and frame-safe child-stdout sanitizing — no more duplicate model bar or torn escapes.
 - **[0.4.7]** (2026-06-14) — Detached subagents + `subagent` control tool, live shaded in-flight output, registry-driven providers, fuller `read` budget, styled italics in the final report, and `gjc` retired.
 - **[0.4.6]** (2026-06-14) — Width-correct forge cards for CJK/emoji, red borders on failed tool cards, aligned `ooo ralph` monitor HUD, and a per-theme user-card palette.
 - **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
-- **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -150,11 +150,11 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 ## 更新日志 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.4.8]** (2026-06-14) — Live-frame stability: constant-height live turn, renderer self-heal off-by-one fix, and frame-safe child-stdout sanitizing — no more duplicate model bar or torn escapes.
 - **[0.4.7]** (2026-06-14) — Detached subagents + `subagent` control tool, live shaded in-flight output, registry-driven providers, fuller `read` budget, styled italics in the final report, and `gjc` retired.
 - **[0.4.6]** (2026-06-14) — Width-correct forge cards for CJK/emoji, red borders on failed tool cards, aligned `ooo ralph` monitor HUD, and a per-theme user-card palette.
 - **[0.4.5]** (2026-06-14) — First-class filesystem make/remove tools.
 - **[0.4.4]** (2026-06-13) — Live subagent status mirroring, always-useful Ctrl+O activity tail, read lineRange crash guard.
-- **[0.4.3]** (2026-06-13) — Readability pass for autopilot, subagent activity, and worked-history review.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.4.7",
+  "version": "0.4.8",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",

package/src/tui/app.ts

@@ -30,7 +30,7 @@ import { costForUsage, formatCost } from "../ai/pricing";
 import { renderMarkdownTables } from "./components/markdown-table";
  
 import { stripMarkdown, renderMarkdownAnsi } from "./components/markdown-text";
-import { visibleWidth, wrapTextWithAnsi } from "./components/width";
+import { visibleWidth, wrapTextWithAnsi, truncateToWidth, sanitizeForFrame } from "./components/width";
 import { categoryBadge } from "./components/category-index";
 import { formatStepTimeline, stepsFromTools, formatStepHeader, formatStepTimelineCompact, type StepState } from "./components/step-timeline";
 import { formatHintBar } from "./components/hints";
@@ -428,7 +428,10 @@ export class LaunchTui {
       },
       onToolProgress: (_tool, partial) => {
         if (this.finished) return;
-        this.liveToolOutput = partial;
+        // Sanitize raw child stdout (CR / EL / cursor-move escapes) before it enters the
+        // frame — unsanitized control bytes tore the renderer's next \x1b[2K (literal "2K")
+        // and hijacked the cursor, corrupting the live frame.
+        this.liveToolOutput = sanitizeForFrame(partial);
         if (Date.now() - this.lastStreamDraw >= 100) {
           this.lastStreamDraw = Date.now();
           this.draw();
@@ -1119,12 +1122,16 @@ export class LaunchTui {
         .split("\n")
         .flatMap(l => wrapTextWithAnsi(l, wrapW))
         .filter(l => l.length > 0);
-      const shown = wrapped.slice(-6); // bottom-anchored tail of the live trace
-      if (shown.length) {
-        tail.push(dim(`${this.unicode ? "│" : "|"} thinking`));
-        for (const l of shown) tail.push(dim(`  ${l}`));
-        tail.push("");
-      }
+      // FIXED reserved height (bottom-anchored, blank-padded at top): once present the
+      // block's row count is CONSTANT, so streaming content never changes the frame
+      // height. The per-100ms height thrash that desynced the differential renderer
+      // (duplicate model bar) is gone; height now toggles only at lifecycle boundaries.
+      const ROWS = 6;
+      const shown = wrapped.slice(-ROWS);
+      tail.push(dim(`${this.unicode ? "│" : "|"} thinking`));
+      for (let k = 0; k < ROWS - shown.length; k++) tail.push("");
+      for (const l of shown) tail.push(dim(`  ${l}`));
+      tail.push("");
     }
 
     // Live tool output (gjc-style streaming bash stdout): while a tool runs, its
@@ -1136,12 +1143,14 @@ export class LaunchTui {
         .split("\n")
         .flatMap(l => wrapTextWithAnsi(l, wrapW))
         .filter(l => l.length > 0);
-      const shown = wrapped.slice(-8); // bottom-anchored tail of the live output
-      if (shown.length) {
-        tail.push(dim(`${this.unicode ? "│" : "|"} output`));
-        for (const l of shown) tail.push(dim(`  ${l}`));
-        tail.push("");
-      }
+      // FIXED reserved height (see thinking block): constant rows while a tool streams,
+      // so cumulative stdout growth does not thrash the frame height.
+      const ROWS = 8;
+      const shown = wrapped.slice(-ROWS);
+      tail.push(dim(`${this.unicode ? "│" : "|"} output`));
+      for (let k = 0; k < ROWS - shown.length; k++) tail.push("");
+      for (const l of shown) tail.push(dim(`  ${l}`));
+      tail.push("");
     }
 
     // Live status field: unboxed thinking line + compact metrics row. The model's
@@ -1307,7 +1316,18 @@ export class LaunchTui {
     // model bar), no outer border, no mascot art — completed work lives in scrollback.
     if (fit && this.inline) {
       const inlineFrame = this.composeInlineFrame({ cols, rows, stepNow, elapsedMs, idx, isThinking, planLines });
-      this.renderer.render(inlineFrame.slice(0, rows));
+      // Option C (constant live-frame height): pad the composed frame to EXACTLY `rows`
+      // — blank rows at the TOP, the tail (status/hud/input/model bar) pinned to the
+      // bottom. With a constant height the differential renderer reserves rows ONCE and
+      // thereafter only does in-place, within-frame cursor moves; the bottom-margin
+      // reserve-GROW that drifted the anchor by one row (the duplicate model bar during
+      // rapid tool churn) never runs again. Every line is still width-clamped so a long
+      // line cannot soft-wrap into a second physical row and desync the row accounting.
+      const capped = inlineFrame.length > rows ? inlineFrame.slice(inlineFrame.length - rows) : inlineFrame;
+      const fixedHeight = capped.length < rows
+        ? [...new Array(rows - capped.length).fill(""), ...capped]
+        : capped;
+      this.renderer.render(fixedHeight.map(l => truncateToWidth(l, cols)));
       return;
     }
 
@@ -1492,6 +1512,6 @@ export class LaunchTui {
     if (fit) {
       frame = frame.slice(0, rows);
     }
-    this.renderer.render(frame);
+    this.renderer.render(frame.map(l => truncateToWidth(l, cols)));
   }
 }

package/src/tui/components/width.ts

@@ -134,6 +134,57 @@ export function truncateToWidth(s: string, cols: number): string {
   return out;
 }
 
+/**
+ * Strip control bytes that would corrupt the live differential frame. KEEPS SGR color
+ * escapes (`\x1b[…m`); DROPS every other CSI (cursor moves, EL/ED erase, etc.), OSC
+ * sequences, other escapes, and bare C0/C1 control bytes except tab/newline; and DROPS
+ * an INCOMPLETE trailing escape (a chunk that ends mid-sequence) so it can never eat the
+ * next line's `\x1b[2K`. Used to sanitize raw child stdout (e.g. a streaming `bun test`
+ * with `\r\x1b[2K` progress lines) before it enters the frame — the torn-escape /
+ * cursor-hijack class of screen corruption.
+ */
+export function sanitizeForFrame(s: string): string {
+  if (!s.includes("\x1b") && !/[\x00-\x08\x0b-\x1f\x7f]/.test(s)) return s; // fast path
+  let out = "";
+  let i = 0;
+  const n = s.length;
+  while (i < n) {
+    const ch = s[i]!;
+    if (ch === "\x1b") {
+      if (s[i + 1] === "[") {
+        // CSI: ESC [ params (0-9;:?<>= space) final (@-~)
+        let j = i + 2;
+        while (j < n && /[0-9;:?<>= ]/.test(s[j]!)) j++;
+        if (j < n && /[@-~]/.test(s[j]!)) {
+          const seq = s.slice(i, j + 1);
+          if (seq.endsWith("m")) out += seq; // keep SGR color, drop all other CSI
+          i = j + 1;
+          continue;
+        }
+        break; // incomplete CSI at the chunk tail → drop the rest
+      }
+      if (s[i + 1] === "]") {
+        // OSC: ESC ] … (BEL | ST = ESC \)
+        let j = i + 2;
+        while (j < n && s[j] !== "\x07" && !(s[j] === "\x1b" && s[j + 1] === "\\")) j++;
+        if (j >= n) break; // incomplete OSC → drop
+        i = s[j] === "\x07" ? j + 1 : j + 2;
+        continue;
+      }
+      i += i + 1 < n ? 2 : 1; // other ESC x → drop ESC (+ its single byte)
+      continue;
+    }
+    const code = ch.charCodeAt(0);
+    if ((code < 0x20 && code !== 0x09 && code !== 0x0a) || code === 0x7f) {
+      i++; // strip bare control bytes (CR/BS/…), keep tab + newline
+      continue;
+    }
+    out += ch;
+    i++;
+  }
+  return out;
+}
+
 /**
  * Hard-wrap text to `cols` display columns, breaking long words and preserving
  * existing newlines. SGR-aware (escapes don't consume width). Returns the wrapped

package/src/tui/renderer.ts

@@ -51,17 +51,22 @@ export class Renderer {
     this.prevCols = currentCols;
 
     const next = lines.map(line => truncate(line, currentCols));
+    // Rows physically occupied by the prior frame — or recorded by reset() when the
+    // baseline was dropped WITHOUT clearing the screen. The diff below EL-clears any
+    // of these that the new (possibly shorter) frame does not cover, and the reserve
+    // block below uses it so a post-reset repaint does not spuriously re-scroll.
+    const occupied = Math.max(this.prev.length, this.coverRows);
     const maxLen = Math.max(this.prev.length, next.length, this.coverRows);
     this.coverRows = 0;
     let cursorRow = 0;
     let out = "";
 
-    if (this.reserve && next.length > this.prev.length && next.length <= Math.max(1, size().rows)) {
+    if (this.reserve && next.length > occupied && next.length <= Math.max(1, size().rows)) {
       // The cursor rests on the frame's first row (the anchor). Walk to the last
       // currently-occupied row, emit one newline per missing row (scrolling the
       // viewport when at the bottom margin), then hop back up to the — possibly
       // shifted — anchor so the diff below paints at stable relative positions.
-      const have = Math.max(this.prev.length, 1);
+      const have = Math.max(occupied, 1);
       out += cursorDown(have - 1) + "\n".repeat(next.length - have) + cursorUp(next.length - 1) + toColumn(1);
     }
 
@@ -92,16 +97,17 @@ export class Renderer {
     }
     out += toColumn(1);
 
-    // Close the synchronized update opened by insertAbove() now that the full
-    // repaint is in the same buffered stream — the terminal presents the overwritten
-    // first row(s), the flushed ledger line, and the repainted frame as ONE atomic update.
-    if (this.syncOpen) {
-      out += END_SYNC;
-      this.syncOpen = false;
-    }
-
+    // Atomic present (DECSET-2026 synchronized update): wrap the WHOLE repaint so the
+    // terminal never shows a half-painted frame — no torn row, no transient duplicate
+    // bar a mid-repaint snapshot could catch. An insertAbove() may have already opened
+    // the update (syncOpen); otherwise this render opens its own. Exactly one BSU/ESU
+    // pair is emitted per write.
     if (out.length > 0) {
-      this.write(out);
+      this.write((this.syncOpen ? "" : BEGIN_SYNC) + out + END_SYNC);
+      this.syncOpen = false;
+    } else if (this.syncOpen) {
+      this.write(END_SYNC);
+      this.syncOpen = false;
     }
 
     this.prev = next;
@@ -137,7 +143,13 @@ export class Renderer {
     // clamped cursor-down desynced the row bookkeeping — each subsequent frame then
     // painted one row higher, devouring the flushed scrollback content above (the
     // "truncated card" corruption).
-    const stale = this.prev.length - written;
+    // Use the same occupancy measure the reserve block uses (max of prev.length and
+    // coverRows). A reset() between frames drops prev but records coverRows; ignoring it
+    // here left the old frame's lower rows uncleared and the cursor below the true
+    // anchor, so the next render's cursorDown crossed the bottom margin and clamped —
+    // the persistent off-by-one that duplicated the model bar.
+    const occupied = Math.max(this.prev.length, this.coverRows);
+    const stale = occupied - written;
     if (stale > 0) {
       for (let i = 0; i < stale; i++) {
         out += toColumn(1) + clearLine() + (i < stale - 1 ? cursorDown(1) : "");
@@ -146,6 +158,7 @@ export class Renderer {
     }
     this.write(out);
     this.prev = [];
+    this.coverRows = 0; // consumed: the frame below is now the single source of truth
   }
 
   /** Clear the live frame. Inline (reserve) mode walks the known frame rows with
@@ -174,6 +187,19 @@ export class Renderer {
   }
 
   reset(): void {
+    // Drop the diff baseline so the next render() repaints every line — but REMEMBER
+    // how many rows are physically on screen so that repaint also EL-clears any the
+    // new (possibly shorter) frame doesn't cover. Without this, a self-heal reset on a
+    // frame that just shrank left stale rows behind (duplicate model bars / orphaned
+    // borders — the live-analysis screen corruption).
+    this.coverRows = Math.max(this.coverRows, this.prev.length);
     this.prev = [];
+    // Close any synchronized update opened by a preceding insertAbove() so a reset()
+    // landing between insertAbove() and the next render() cannot strand an open BSU
+    // window (which times out ~150ms later and flashes a partial frame).
+    if (this.syncOpen) {
+      this.write(END_SYNC);
+      this.syncOpen = false;
+    }
   }
 }