jeo-code 0.6.32 → 0.6.34

package/CHANGELOG.md

@@ -6,6 +6,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 The README mirrors the latest 5 entries — regenerate with `bun run changelog:sync`.
 
+## [0.6.33] - 2026-06-19
+## [0.6.34] - 2026-06-20
+_Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate._
+
+### Added
+- **Sessions remember their model (per-session model selection).** The session JSONL header now carries an optional `model` field: `createSession(cwd, id, model?)` pins it, `updateSessionModel(id, model)` rewrites it in place (no message loss, byte-identical no-op when unchanged), and `loadSession`/`listSessions` restore it. In `launch.ts`, every model change — the `/model` picker, a `model …` action, the OpenAI-compatible-endpoint setter, and live picker selections — is persisted into the active session via a best-effort `persistSessionModel()` (a header-rewrite failure never aborts the turn). On `/resume` (and `--resume`) the session's pinned model is restored unless the CLI explicitly pinned one (`--model`/role/provider wins), so each session can carry its own model independent of the global default. The `--resume` list and the resume picker surface the pinned model (`[provider/model]`).
+
+### Changed
+- **`jeo --tmux` reports a failed attach instead of vanishing.** A nonzero `tmux attach` exit (e.g. `open terminal failed: not a terminal` when stdout isn't a real TTY, a too-small client, or a transient server error) used to be swallowed — jeo returned 0 and left the freshly created session orphaned with no hint. The attach exit code is now surfaced and propagated to `process.exitCode`, and the message is honest about state: it advises `tmux attach -t <session>` only when the session is STILL live, and otherwise reports the session `ended before it could be attached` (so "reattach" is never misleading after an instant inner crash).
+- **tmux session names no longer produce a double dash.** `tmuxSafeNamePart` now trims a trailing dash off the truncated head before appending the disambiguating hash, so a truncation boundary landing right after a `-` yields `name-<hash>` instead of an ugly `name--<hash>`.
+- **`renameSession` shares one header-rewrite path.** Both the rename and the new model-pin go through a single internal `rewriteSessionHeader(id, mutate, cwd)` that locates the JSONL header, applies a mutator (returning `false` to skip the write when nothing changed), and rewrites the file in place — one place for the missing-file/missing-header error handling.
+
+### Verified
+- **No bun memory leak / slowdown.** `scripts/mem-probe.ts` drove 2000–4000 realistic LaunchTui turns: the post-GC heap keeps returning to a flat settled floor (~4.3 MB across turns 200→3400, net **+0.52 MB** vs baseline), with `exit`/`resize`/`SIGINT` process-listener counts stable (no accumulation). The probe's net-growth gate was hardened to measure the **settled floor** (min over the trailing half of samples) rather than the single final sample, since Bun's incremental GC leaves the per-sample heap bimodal — a final sample landing on a transient pre-collection peak was a measurement artifact, not retained memory.
+- **`jeo --tmux` live.** `tmux-verify.sh smoke` OK + `battery` **6/6 PASSED** (boot, `/help`, unknown `$skill`, `/agents`, `$ultragoal`, unresolved `/command`).
+- **Green gates.** `bun run typecheck` clean; `bun test` **1714 pass / 0 fail** (211 files), including the new per-session-model round-trip (`test/session.test.ts`) and tmux attach-failure / double-dash cases (`test/tmux.test.ts`).
+
+_A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification._
+
+### Changed
+- **The forge mark is a hollow line-board emblem now.** `FORGE_MARK_ART`, its grand `FORGE_MARK_ART_GRAND` hero variant, the claw-snap blink frames (`FORGE_MARK_FRAMES`), and every ASCII fallback (`*_ASCII`) were redrawn as the `>-<` silhouette of two pincer CLAWS (집게) whose top arms bend inward toward a narrow central eyeglass-frame (안경태) BRIDGE — each stroke a thick rounded-corner tube (`╭╮╰╯` + `─│`, ASCII `.-'|`) so the shape reads as a heavy neon outline instead of a filled block. The old wordmark glyphs (`J E O`) and the `╳` DNA double-helix nodes are gone; every line stays width-1 and equal-width so the blue→violet→pink flow gradient and the padding/centering math are untouched.
+- **Forge cards render at a compact reduced width.** New `FORGE_SCALE` (1.2) + `scaleForgeWidth(available)` in `forge.ts` divide the caller's available column run down to a compact panel width (floored at 24). `app.ts` routes both the inline `flushForgeCard` and the static forge summary through it, so a card reads as a contained panel instead of stretching edge-to-edge with a dead right margin.
+- **One source for the done-time verification directive.** New `VERIFICATION_DIRECTIVE` constant in `engine.ts` replaces the string that was duplicated verbatim in `executorSystemPrompt`'s default and `launch.ts`'s interactive prompt. It folds in gjc's `<verification>` test-quality contract — written tests must exercise observable behavior, edge values, branch conditions, invariants, and error handling, never asserting defaults or tautologies — and `prompts/agents/executor.md` gains a matching constraint line.
+
+### Verified
+- **No bun memory leak / slowdown.** `scripts/mem-probe.ts` drove 2000 realistic LaunchTui turns: post-GC heap returns to baseline (per-turn slope **−480 bytes/turn**, net +3.28 MB held flat), with `exit`/`resize`/`SIGINT` process-listener counts stable (no accumulation).
+- **`jeo --tmux` live.** `scripts/tmux-verify.sh smoke` OK and `battery` **6/6 PASSED** (boot, `/help`, unknown `$skill` feedback, `/agents` roster, `$ultragoal` dispatch, unresolved `/command` report).
+- **Green gates.** `bun run typecheck` clean; `bun test` **1710 pass / 0 fail** across 211 files.
+
 ## [0.6.32] - 2026-06-19
 _Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification._
 

package/README.ja.md

@@ -200,11 +200,11 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 ## 変更履歴 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
-- **[0.6.28]** (2026-06-19) — Signed thinking-block replay: native reasoning is now sent BACK to providers across steps/turns, restoring multi-step reasoning continuity (gajae parity).
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -200,11 +200,11 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 ## 변경 이력 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
-- **[0.6.28]** (2026-06-19) — Signed thinking-block replay: native reasoning is now sent BACK to providers across steps/turns, restoring multi-step reasoning continuity (gajae parity).
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -200,11 +200,11 @@ Required npm token permissions (repository secret `NPM_TOKEN`):
 ## Changelog
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
-- **[0.6.28]** (2026-06-19) — Signed thinking-block replay: native reasoning is now sent BACK to providers across steps/turns, restoring multi-step reasoning continuity (gajae parity).
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -200,11 +200,11 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 ## 更新日志 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
-- **[0.6.28]** (2026-06-19) — Signed thinking-block replay: native reasoning is now sent BACK to providers across steps/turns, restoring multi-step reasoning continuity (gajae parity).
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.6.32",
+  "version": "0.6.34",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",

package/src/agent/engine.ts

@@ -164,10 +164,18 @@ export const OUTPUT_DISCIPLINE = [
   "- Match reply length to the task: a one-line change gets a one-line report.",
 ].join("\n");
 
+/** gjc-inherited verification directive (plan/gjc-inheritance.md, round 16): the
+ *  done self-check PLUS gjc's `<verification>` test-quality contract — what makes a
+ *  test worth writing. Single source consumed by both executorSystemPrompt's default
+ *  and launch.ts's interactive prompt (was duplicated verbatim in both). */
+export const VERIFICATION_DIRECTIVE =
+  "Before calling done, self-check: did I run the test or command that exercises this change, are directly-affected callsites/tests/docs updated, and does my claim match real output? If any answer is no, keep working — do not call done. " +
+  "When you write tests, exercise observable behavior, edge values, branch conditions, invariants, and error handling — never assert defaults or tautologies.";
+
 export function executorSystemPrompt(
   role = "Executor Agent, a senior software developer",
   protocol: string = TOOL_PROTOCOL,
-  verificationDirective = "Before calling done, self-check: did I run the test or command that exercises this change, are directly-affected callsites/tests/docs updated, and does my claim match real output? If any answer is no, keep working — do not call done.",
+  verificationDirective = VERIFICATION_DIRECTIVE,
 ): string {
   return (
     `You are the ${role}.\n` +

package/src/agent/session.ts

@@ -10,6 +10,9 @@ export interface SessionHeader {
   timestamp: string;
   cwd: string;
   title?: string;
+  /** Model id pinned to this session; restored on resume so each session can carry
+   *  its own model independent of the global default (per-session model selection). */
+  model?: string;
 }
 
 export interface SessionEntry {
@@ -35,6 +38,8 @@ export interface SessionSummary {
   /** Session file size in bytes (for the resume picker's metadata line). */
   sizeBytes?: number;
   title?: string;
+  /** Model id pinned to this session (header `model`), if any. */
+  model?: string;
 }
 
 export const SESSION_VERSION = 1;
@@ -53,7 +58,8 @@ export function sessionPath(id: string, cwd = process.cwd()): string {
 
 export async function createSession(
   cwd = process.cwd(),
-  id = newSessionId()
+  id = newSessionId(),
+  model?: string
 ): Promise<{ id: string; path: string }> {
   const dir = sessionsDir(cwd);
   await fs.mkdir(dir, { recursive: true });
@@ -64,6 +70,7 @@ export async function createSession(
     id,
     timestamp: new Date().toISOString(),
     cwd,
+    ...(model ? { model } : {}),
   };
 
   const file = sessionPath(id, cwd);
@@ -292,6 +299,7 @@ export async function listSessions(cwd = process.cwd()): Promise<SessionSummary[
         mtimeMs: stat.mtimeMs,
         sizeBytes: stat.size,
         title: header.title,
+        model: header.model,
       });
     } catch {
       // Tolerate malformed files (skip them)
@@ -309,10 +317,16 @@ export async function latestSessionId(cwd = process.cwd()): Promise<string | und
 }
 
 /**
- * Rename a session by updating the title in its JSONL header.
- * Throws a clear Error if the session file does not exist.
+ * Locate the session's JSONL header, apply `mutate`, and rewrite the file in place.
+ * `mutate` returns false to signal "no change needed" (skips the write). Shared by
+ * {@link renameSession} and {@link updateSessionModel}. Throws a clear Error when the
+ * session file or its header is missing.
  */
-export async function renameSession(id: string, title: string, cwd = process.cwd()): Promise<void> {
+async function rewriteSessionHeader(
+  id: string,
+  mutate: (header: SessionHeader) => boolean,
+  cwd: string,
+): Promise<void> {
   const file = sessionPath(id, cwd);
   let content: string;
   try {
@@ -347,11 +361,35 @@ export async function renameSession(id: string, title: string, cwd = process.cwd
     throw new Error(`Session header missing in session ${id}`);
   }
 
-  header.title = title;
+  if (!mutate(header)) return;
   lines[headerIndex] = JSON.stringify(header);
   await fs.writeFile(file, lines.join("\n"), "utf8");
 }
 
+/**
+ * Rename a session by updating the title in its JSONL header.
+ * Throws a clear Error if the session file does not exist.
+ */
+export async function renameSession(id: string, title: string, cwd = process.cwd()): Promise<void> {
+  await rewriteSessionHeader(id, header => {
+    header.title = title;
+    return true;
+  }, cwd);
+}
+
+/**
+ * Pin a model to a session by updating the `model` field in its JSONL header so a
+ * later `/resume` restores it. No-op (no write) when the header already names that
+ * model. Throws a clear Error if the session file does not exist.
+ */
+export async function updateSessionModel(id: string, model: string, cwd = process.cwd()): Promise<void> {
+  await rewriteSessionHeader(id, header => {
+    if (header.model === model) return false;
+    header.model = model;
+    return true;
+  }, cwd);
+}
+
 /**
  * Delete a session file.
  * Returns false on ENOENT, true on success.

package/src/commands/launch/tmux.ts

@@ -14,7 +14,11 @@ function hashString(input: string): string {
 function tmuxSafeNamePart(input: string, max = 32): string {
   const safe = input.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "value";
   if (safe.length <= max) return safe;
-  return `${safe.slice(0, Math.max(1, max - 7))}-${hashString(input)}`;
+  // Trim a trailing dash from the truncated head so a boundary landing right
+  // after a `-` doesn't produce an ugly `name--<hash>` (double dash). The head
+  // is guaranteed non-empty and to start with an alnum (safe is trimmed).
+  const head = safe.slice(0, Math.max(1, max - 7)).replace(/-+$/, "") || safe.slice(0, 1);
+  return `${head}-${hashString(input)}`;
 }
 
 function tmuxRuntimeSuffix(flags: LaunchFlags): string {

package/src/commands/launch.ts

@@ -1,7 +1,7 @@
 import { createInterface } from "node:readline/promises";
 import { emitKeypressEvents } from "node:readline";
 import { PassThrough } from "node:stream";
-import { runAgentLoop, DEFAULT_TOOLS, TOOL_PROTOCOL, WORKING_DISCIPLINE, OUTPUT_DISCIPLINE, type AgentLoopEvents } from "../agent/engine";
+import { runAgentLoop, DEFAULT_TOOLS, TOOL_PROTOCOL, WORKING_DISCIPLINE, OUTPUT_DISCIPLINE, VERIFICATION_DIRECTIVE, type AgentLoopEvents } from "../agent/engine";
 import { createOpikTracer, wrapEvents } from "../agent/opik-tracer";
 import { initialDynamicStepLimit } from "../agent/step-budget";
 import { memoryPromptSection, spawnDetachedDistill } from "../agent/memory";
@@ -15,7 +15,7 @@ import { runRalplanEngine, type RalplanEngineOptions } from "./ralplan";
 import { runTeamEngine, type TeamEngineOptions } from "./team";
 import { runUltragoalEngine, type UltragoalEngineOptions } from "./ultragoal";
 import { skillsPromptSection, loadSkills, buildSkillTask, workflowSkillsForPrompt, parseSkillInvocation, parseSkillChain, looksLikeSkillEcho, skillInvocationCard, type SkillDoc, type SkillInvocation } from "../skills/catalog";
-import { formatForgeBox } from "../tui/components/forge";
+import { formatForgeBox, scaleForgeWidth } from "../tui/components/forge";
 import { interactiveOAuthLogin } from "./auth";
 import { logoutOAuth, OAUTH_PROVIDERS, API_KEY_ONLY_PROVIDERS, setApiKey } from "../auth";
 import type { AuthProvider } from "../auth";
@@ -91,6 +91,7 @@ import {
   latestSessionId,
   exportSession,
   renameSession,
+  updateSessionModel,
   deleteSession,
   sessionPath,
   appendCompaction,
@@ -383,8 +384,27 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           stdout: "inherit",
           stderr: "inherit",
         });
-        await attach.exited;
+        // A nonzero attach exit (e.g. "open terminal failed: not a terminal" when
+        // stdout isn't a real TTY, a too-small client, or a transient server error)
+        // otherwise vanished: jeo returned 0 and the freshly created session was left
+        // orphaned with no hint. Surface it. Only advise reattach when the session is
+        // STILL live — if the inner jeo already exited (bad args, instant crash) the
+        // session is gone and "reattach" would be misleading.
+        const attachCode = await attach.exited;
+        if (attachCode !== 0) {
+          const alive = Bun.spawnSync([tmuxBin, "has-session", "-t", `=${sessionName}`], {
+            stdout: "ignore",
+            stderr: "ignore",
+          }).exitCode === 0;
+          console.error(
+            alive
+              ? `Error: tmux attach failed (exit ${attachCode}). The session is still running; reattach with: tmux attach -t ${sessionName}`
+              : `Error: tmux session ${sessionName} ended before it could be attached (attach exit ${attachCode}).`,
+          );
+          process.exitCode = attachCode;
+        }
         return;
+
       } else {
         console.warn("warning: tmux is not available on PATH. Launching directly...");
       }
@@ -411,7 +431,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     }
     console.log("Saved sessions (newest first):");
     for (const s of sessions) {
-      console.log(`  ${s.id}  ${s.timestamp}  (${s.messageCount} msgs)  ${s.preview}`);
+      console.log(`  ${s.id}  ${s.timestamp}  (${s.messageCount} msgs)${s.model ? `  [${s.model}]` : ""}  ${s.preview}`);
     }
     console.log("\nResume with: jeo launch --resume <id>");
     return;
@@ -470,7 +490,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     preamble + "\n\n" + protocol + "\n\n" +
     WORKING_DISCIPLINE + "\n\n" +
     OUTPUT_DISCIPLINE + "\n\n" +
-    "Before calling done, self-check: did I run the test or command that exercises this change, are directly-affected callsites/tests/docs updated, and does my claim match real output? If any answer is no, keep working — do not call done." +
+    VERIFICATION_DIRECTIVE +
     "\nWhen you have finished the user's request, or need to reply to or ask the user something, call done with {\"reason\": <your natural-language reply to the user>}. The reason text is shown to the user as your message." +
     (allowedTools.has("task") ? "\n\nDelegation: " + taskToolProtocolLine(cfg) +
     " Call task with {\"role\": <one of the advertised roles>, \"task\": <assignment>, \"context\": <optional>} to hand a focused slice to a subagent." : "") +
@@ -588,23 +608,37 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
       const id = flags.resumeId ?? (await latestSessionId(cwd));
       if (!id) {
         console.log("No session to resume. Starting a new one.");
-        sessionId = (await createSession(cwd)).id;
+        sessionId = (await createSession(cwd, undefined, sessionModel)).id;
       } else {
         try {
-          const { messages } = await loadSession(id, cwd);
+          const { header, messages } = await loadSession(id, cwd);
           for (const m of messages) history.push(m);
           sessionId = id;
-          console.log(`Resumed session ${id} (${messages.length} messages).`);
+          // Restore the model this session was last using unless the CLI explicitly
+          // pinned one (flags.model/role/provider → initialSessionModel wins).
+          if (!initialSessionModel && header.model) sessionModel = header.model;
+          const modelNote = sessionModel ? ` · model ${sessionModel}` : "";
+          console.log(`Resumed session ${id} (${messages.length} messages).${modelNote}`);
         } catch (err) {
           console.log(`Could not resume ${id}: ${(err as Error).message}. Starting fresh.`);
-          sessionId = (await createSession(cwd)).id;
+          sessionId = (await createSession(cwd, undefined, sessionModel)).id;
         }
       }
     } else {
-      sessionId = (await createSession(cwd)).id;
+      sessionId = (await createSession(cwd, undefined, sessionModel)).id;
     }
   }
 
+  // Persist the active per-session model into the session header so `/resume` restores
+  // it (each session can carry its own model independent of the global default).
+  // Best-effort: a header-rewrite failure must never abort the turn.
+  const persistSessionModel = async (): Promise<void> => {
+    if (flags.noSession || !sessionId || !sessionModel) return;
+    try {
+      await updateSessionModel(sessionId, sessionModel, cwd);
+    } catch { /* best-effort */ }
+  };
+
   // `step N/M` display seed: the explicit --max-steps cap, else the dynamic budget's
   // rolling base — the engine's onBudget event keeps the denominator honest as it grows.
   const initialStepLimit = flags.maxSteps > 0 ? flags.maxSteps : initialDynamicStepLimit();
@@ -1007,7 +1041,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
         history.length = 1;
         if (sessionId && !flags.noSession) {
           try {
-            sessionId = (await createSession(cwd)).id;
+            sessionId = (await createSession(cwd, undefined, sessionModel)).id;
           } catch { /* best-effort: in-memory clear already done */ }
         }
         console.log("(history cleared)");
@@ -1194,7 +1228,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     {
       const card = formatForgeBox(
         { title: "[skill]", lines: skillInvocationCard(skill, intent) },
-        { width: Math.min(100, Math.max(40, (process.stdout.columns ?? 80) - 2)), unicode: supportsUnicode(), paint: accentPaint(uiTheme), paintShadow: accentShadowPaint(uiTheme), color: uiTheme.color },
+        { width: scaleForgeWidth(Math.min(100, Math.max(40, (process.stdout.columns ?? 80) - 2))), unicode: supportsUnicode(), paint: accentPaint(uiTheme), paintShadow: accentShadowPaint(uiTheme), color: uiTheme.color },
       );
       logLines(card);
     }
@@ -2317,6 +2351,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     const { resolved, provider } = await describeModel(target);
     const st = (await describeAllProviders(cfgForPick)).find(s => s.name === provider);
     sessionModel = target;
+    await persistSessionModel();
     const defaultThinking = isThinkingLevel(action) ? action : undefined;
     if (defaultThinking) {
       sessionThinking = defaultThinking;
@@ -2873,7 +2908,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
         const startFreshSession = async (verb: string): Promise<void> => {
           history.length = 1;
           if (!flags.noSession) {
-            sessionId = (await createSession(cwd)).id;
+            sessionId = (await createSession(cwd, undefined, sessionModel)).id;
             advanceSessionBoxColor(); // distinct input-box hue per newly opened session
             console.log(`(${verb} — new session ${sessionId})`);
           } else {
@@ -2916,10 +2951,12 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           const arg = tokens.slice(1).join(" ").trim();
           const applyResume = async (rid: string): Promise<void> => {
             try {
-              const { messages } = await loadSession(rid, cwd);
+              const { header, messages } = await loadSession(rid, cwd);
               history.length = 1;
               for (const m of messages) history.push(m);
               sessionId = rid;
+              // Restore the model this session was last using (per-session model).
+              if (header.model) sessionModel = header.model;
               // Seed /retry + reply marker from the last user/assistant turn.
               lastUserInput = ""; lastReply = "";
               for (let k = history.length - 1; k >= 1; k--) {
@@ -3497,6 +3534,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
             const qualified = qualifyModelId(modelArg, "openai");
             sessionModel = qualified;
             await saveConfigPatch(raw => rememberModelPatch(raw, qualified));
+            await persistSessionModel();
             console.log(`OpenAI-compatible endpoint set: ${url} · default model ${qualified} — saved to ~/.jeo/config.json.`);
           } else {
             console.log(`OpenAI-compatible endpoint set: ${url} — saved to ~/.jeo/config.json.`);
@@ -4012,6 +4050,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           // MRU persistence: picking a model IS saving it — the newest pick wins
           // as the global default; recents keep the rotation for every session.
           await saveConfigPatch(raw => rememberModelPatch(raw, arg));
+          await persistSessionModel();
         }
         const { resolved, provider } = await describeModel(label);
         const st = statuses.find(s => s.name === provider);

package/src/prompts/agents/executor.md

@@ -10,6 +10,7 @@ Turn a bounded task into a working, verified outcome with the smallest correct c
 - Keep diffs small and aligned to existing patterns.
 - Do not broaden scope or invent abstractions unless the task requires them.
 - Verify the task before calling done.
+- When you add tests, exercise observable behavior, edge values, branch conditions, invariants, and error handling — never assert defaults or tautologies.
 - Communicate the result through `done.reason` using the required output contract.
 </constraints>
 

package/src/tui/app.ts

@@ -24,7 +24,7 @@ import { centerBlock, padLineTo, boxBlock, BOX_ASCII, BOX_UNICODE } from "./comp
 import { SECTION_GAP, sectionLabel, stackSections } from "./components/section";
 import { resolveTheme, themeGradient, accentPaint, accentShadowPaint, diffPaint, mutedPaint, cardFillPaint } from "./components/themes";
 import { detectColorLevel, animatedGradientText, ColorLevel } from "./components/color";
-import { formatForgeBox, summarizeForgeInvocation, summarizeForgeResult, fitForgeBoxes, webSearchCardLines, type ForgeSummary } from "./components/forge";
+import { formatForgeBox, summarizeForgeInvocation, summarizeForgeResult, fitForgeBoxes, webSearchCardLines, scaleForgeWidth, type ForgeSummary } from "./components/forge";
 import { renderStatusBar, renderStatusBox, type StatusBoxData } from "./components/status";
 import { costForUsage } from "../ai/pricing";
 import { renderMarkdownTables } from "./components/markdown-table";
@@ -1206,7 +1206,7 @@ export class LaunchTui {
    *  Non-inline modes keep the card in `forgeSummaries` for the final static summary. */
   private flushForgeCard(summary: ForgeSummary, success?: boolean): void {
     if (!this.inline || this.finished) return;
-    const width = Math.max(24, size().cols - 1);
+    const width = scaleForgeWidth(size().cols - 1);
     // gjc D2 (state-encoded border): a FAILED card gets a red border so it pops
     // out of scrollback at a glance; OK/neutral cards keep the theme accent
     // identity. The ✓/✗ title mark already encodes state, but the border tone
@@ -1235,10 +1235,9 @@ export class LaunchTui {
     anim?: { phase: number; colorLevel: ColorLevel; beat: string },
     dim = false,
   ): string[] {
-    const floor = Math.min(24, width);
-    // Fill the available width so an in-frame box does not leave a dead right-margin
-    // column inside the outer panel.
-    const boxWidth = Math.max(floor, width);
+    // Forge cards render at a reduced (÷FORGE_SCALE) compact width rather than
+    // spanning the full available column run.
+    const boxWidth = scaleForgeWidth(width);
     const paint = this.theme.color ? accentPaint(this.theme) : (s: string) => s;
     const lines: string[] = [];
     for (const [i, summary] of this.forgeSummaries.slice(-maxEntries).entries()) {

package/src/tui/components/ascii-art.ts

@@ -412,46 +412,61 @@ export async function animateFrames(stage: AsciiStage, opts: AnimateFramesOption
   }
   return total;
 }
-/** The compact jeo forge mark: a symmetrical crayfish (가재) brand emblem composed
- *  of SIMPLE, DISCONNECTED shapes (no connecting strokes) that highlight the signature
- *  pincer CLAWS (집게) flanking the sides (◤◣ and ❮ on the left, ◥◢ and ❯ on the right),
- *  the body carrying the JEO wordmark (J E O), and a DNA double-helix woven above and
- *  below as a row of crossing nodes (╳ = base-pair crossings). gjc-forge aesthetic:
- *  clean negative space, geometric symmetry, the blue→violet→pink flow gradient applied
- *  by renderForgeMark doing the neon glow. Width-1 glyphs only (box drawing + geometrics)
- *  so padding/centering math stays exact. Frame 0 is the static symbol. */
+/** The compact jeo forge mark: a symmetrical crayfish (가재) brand emblem drawn as a
+ *  2.5×-thick LINE-BOARD (hollow outline, no fill) — the `>-<` silhouette of two pincer
+ *  CLAWS (집게) whose top arms bend (꺾임) inward toward a narrow central BRIDGE (the
+ *  eyeglass-frame / 안경태 bar). Every stroke is rendered as a thick rounded-corner tube
+ *  (╭╮╰╯ + ─│) so the shape reads as a heavy neon outline, not a filled block. No letters.
+ *  Width-1 glyphs only (box drawing) so padding/centering math stays exact, and the
+ *  blue→violet→pink flow gradient from renderForgeMark supplies the neon glow. Frame 0 is
+ *  the static symbol. */
 export const FORGE_MARK_ART: string[] = [
-  "◤   ╳ ╳ ╳ ╳   ◥",
-  "❮    J E O    ❯",
-  "◣   ╳ ╳ ╳ ╳   ◢"
+  "╭─────╮             ╭─────╮",
+  "│     │             │     │",
+  "╰─╮   │ ╭─────────╮ │   ╭─╯",
+  "  │   │ │         │ │   │  ",
+  "╭─╯ ╭─╯ ╰─────────╯ ╰─╮ ╰─╮",
+  "│   │                 │   │",
+  "╰───╯                 ╰───╯"
 ];
 
 export const FORGE_MARK_ART_ASCII: string[] = [
-  "/   x x x x   \\",
-  "<    J E O    >",
-  "\\   x x x x   /"
+  ".-----.             .-----.",
+  "|     |             |     |",
+  "'-.   | .---------. |   .-'",
+  "  |   | |         | |   |  ",
+  ".-' .-' '---------' '-. '-.",
+  "|   |                 |   |",
+  "'---'                 '---'"
 ];
 
-/** Claw-snap blink frames for the compact lobster forge mark: the helix nodes, the
- *  JEO body and the inner claw/tail glyphs stay fixed while the four splayed pincer
- *  CORNERS snap (◤◣ / ◥◢ open → ◢◥ / ◣◤ closed), so the lobster "clicks" its claws.
- *  Frame 0 === FORGE_MARK_ART, so a frameless render is byte-identical to the static
+/** Claw-snap blink frames for the compact lobster forge mark: the central bridge stays
+ *  fixed while the four pincer arms snap (open → clenched), so the lobster "clicks" its
+ *  claws. Frame 0 === FORGE_MARK_ART, so a frameless render is byte-identical to the static
  *  symbol. All lines share the same width and width-1 glyphs. */
 export const FORGE_MARK_FRAMES: string[][] = [
   FORGE_MARK_ART,
   [
-    "◢   ╳ ╳ ╳ ╳   ◣",
-    "❮    J E O    ❯",
-    "◥   ╳ ╳ ╳ ╳   ◤"
+    "╭───╮                 ╭───╮",
+    "│   │                 │   │",
+    "╰─╮ ╰─╮ ╭─────────╮ ╭─╯ ╭─╯",
+    "  │   │ │         │ │   │  ",
+    "╭─╯   │ ╰─────────╯ │   ╰─╮",
+    "│     │             │     │",
+    "╰─────╯             ╰─────╯"
   ]
 ];
 
 export const FORGE_MARK_FRAMES_ASCII: string[][] = [
   FORGE_MARK_ART_ASCII,
   [
-    "\\   x x x x   /",
-    "<    J E O    >",
-    "/   x x x x   \\"
+    ".---.                 .---.",
+    "|   |                 |   |",
+    "'-. '-. .---------. .-' .-'",
+    "  |   | |         | |   |  ",
+    ".-'   | '---------' |   '-.",
+    "|     |             |     |",
+    "'-----'             '-----'"
   ]
 ];
 
@@ -461,23 +476,34 @@ export function forgeMarkFrameCount(): number {
 }
 
 /** Grand hero variant for the welcome forge box (gjc-style spacious banner): the same
- *  symmetrical crayfish emblem rendered large — the splayed pincer claws as corner wedges
- *  (◤◣ left, ◥◢ right) and heavy brackets (❮ left, ❯ right), the JEO wordmark spaced
- *  across the body (J   E   O), and the DNA double-helix woven above and below as a wider
- *  row of crossing nodes (╳). gjc-forge aesthetic: generous negative space + geometric
- *  symmetry, with renderForgeMark's blue→violet→pink flow gradient supplying the neon glow.
- *  Width 29 (matches the welcome compact↔grand threshold) and width-1 glyphs only so
- *  padding/centering math stays exact. */
+ *  crayfish line-board emblem rendered large — the pincer claws and central eyeglass
+ *  bridge drawn as wider 3×-thick rounded outline tubes (╭╮╰╯ + ─│), no fill, no letters.
+ *  Width-1 glyphs only so padding/centering math stays exact, with renderForgeMark's
+ *  blue→violet→pink flow gradient supplying the neon glow. */
 export const FORGE_MARK_ART_GRAND: string[] = [
-  "◤        ╳ ╳ ╳ ╳ ╳ ╳        ◥",
-  "❮         J   E   O         ❯",
-  "◣        ╳ ╳ ╳ ╳ ╳ ╳        ◢"
+  "╭────────╮                    ╭────────╮",
+  "│        │                    │        │",
+  "│        │                    │        │",
+  "╰──╮     │  ╭──────────────╮  │     ╭──╯",
+  "   │     │  │              │  │     │   ",
+  "   │     │  │              │  │     │   ",
+  "╭──╯  ╭──╯  ╰──────────────╯  ╰──╮  ╰──╮",
+  "│     │                          │     │",
+  "│     │                          │     │",
+  "╰─────╯                          ╰─────╯"
 ];
 
 export const FORGE_MARK_ART_GRAND_ASCII: string[] = [
-  "/        x x x x x x        \\",
-  "<         J   E   O         >",
-  "\\        x x x x x x        /"
+  ".--------.                    .--------.",
+  "|        |                    |        |",
+  "|        |                    |        |",
+  "'--.     |  .--------------.  |     .--'",
+  "   |     |  |              |  |     |   ",
+  "   |     |  |              |  |     |   ",
+  ".--'  .--'  '--------------'  '--.  '--.",
+  "|     |                          |     |",
+  "|     |                          |     |",
+  "'-----'                          '-----'"
 ];
 
 // Bounded memo of fully-rendered forge-mark frames keyed by every input that affects

package/src/tui/components/forge.ts

@@ -479,6 +479,15 @@ export function fitForgeBoxes(lines: string[], budget: number): string[] {
   return out;
 }
 
+/** Forge cards render at a reduced scale: the available width is divided by this
+ *  factor so a box reads as a compact panel instead of spanning the full terminal. */
+export const FORGE_SCALE = 1.2;
+
+/** Scale a caller's available width down to the forge card's compact render width. */
+export function scaleForgeWidth(available: number): number {
+  return Math.max(24, Math.trunc(available / FORGE_SCALE));
+}
+
 export function formatForgeBox(summary: ForgeSummary, opts: ForgeBoxOptions = {}): string[] {
   const innerWidth = opts.width ?? 80;
   const floor = Math.min(24, innerWidth);