jeo-code 0.6.33 → 0.6.34

package/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 The README mirrors the latest 5 entries — regenerate with `bun run changelog:sync`.
 
 ## [0.6.33] - 2026-06-19
+## [0.6.34] - 2026-06-20
+_Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate._
+
+### Added
+- **Sessions remember their model (per-session model selection).** The session JSONL header now carries an optional `model` field: `createSession(cwd, id, model?)` pins it, `updateSessionModel(id, model)` rewrites it in place (no message loss, byte-identical no-op when unchanged), and `loadSession`/`listSessions` restore it. In `launch.ts`, every model change — the `/model` picker, a `model …` action, the OpenAI-compatible-endpoint setter, and live picker selections — is persisted into the active session via a best-effort `persistSessionModel()` (a header-rewrite failure never aborts the turn). On `/resume` (and `--resume`) the session's pinned model is restored unless the CLI explicitly pinned one (`--model`/role/provider wins), so each session can carry its own model independent of the global default. The `--resume` list and the resume picker surface the pinned model (`[provider/model]`).
+
+### Changed
+- **`jeo --tmux` reports a failed attach instead of vanishing.** A nonzero `tmux attach` exit (e.g. `open terminal failed: not a terminal` when stdout isn't a real TTY, a too-small client, or a transient server error) used to be swallowed — jeo returned 0 and left the freshly created session orphaned with no hint. The attach exit code is now surfaced and propagated to `process.exitCode`, and the message is honest about state: it advises `tmux attach -t <session>` only when the session is STILL live, and otherwise reports the session `ended before it could be attached` (so "reattach" is never misleading after an instant inner crash).
+- **tmux session names no longer produce a double dash.** `tmuxSafeNamePart` now trims a trailing dash off the truncated head before appending the disambiguating hash, so a truncation boundary landing right after a `-` yields `name-<hash>` instead of an ugly `name--<hash>`.
+- **`renameSession` shares one header-rewrite path.** Both the rename and the new model-pin go through a single internal `rewriteSessionHeader(id, mutate, cwd)` that locates the JSONL header, applies a mutator (returning `false` to skip the write when nothing changed), and rewrites the file in place — one place for the missing-file/missing-header error handling.
+
+### Verified
+- **No bun memory leak / slowdown.** `scripts/mem-probe.ts` drove 2000–4000 realistic LaunchTui turns: the post-GC heap keeps returning to a flat settled floor (~4.3 MB across turns 200→3400, net **+0.52 MB** vs baseline), with `exit`/`resize`/`SIGINT` process-listener counts stable (no accumulation). The probe's net-growth gate was hardened to measure the **settled floor** (min over the trailing half of samples) rather than the single final sample, since Bun's incremental GC leaves the per-sample heap bimodal — a final sample landing on a transient pre-collection peak was a measurement artifact, not retained memory.
+- **`jeo --tmux` live.** `tmux-verify.sh smoke` OK + `battery` **6/6 PASSED** (boot, `/help`, unknown `$skill`, `/agents`, `$ultragoal`, unresolved `/command`).
+- **Green gates.** `bun run typecheck` clean; `bun test` **1714 pass / 0 fail** (211 files), including the new per-session-model round-trip (`test/session.test.ts`) and tmux attach-failure / double-dash cases (`test/tmux.test.ts`).
+
 _A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification._
 
 ### Changed

package/README.ja.md

@@ -200,11 +200,11 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 ## 変更履歴 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
-- **[0.6.33]** (2026-06-19) — A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification.
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -200,11 +200,11 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 ## 변경 이력 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
-- **[0.6.33]** (2026-06-19) — A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification.
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -200,11 +200,11 @@ Required npm token permissions (repository secret `NPM_TOKEN`):
 ## Changelog
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
-- **[0.6.33]** (2026-06-19) — A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification.
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -200,11 +200,11 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 ## 更新日志 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
-- **[0.6.33]** (2026-06-19) — A redesigned `jeo` forge mark — a hollow line-board crayfish/eyeglass emblem drawn as thick rounded-corner tubes (no letters, no DNA helix) — that now renders inside compact-scaled forge cards, plus a unified verification directive that adds gjc's test-quality contract, and a fresh `jeo --tmux` no-leak re-verification.
+- **[0.6.33]** (2026-06-19)
+- **[0.6.34]** (2026-06-20) — Per-session model memory — each saved session now remembers the model it was last using and restores it on `/resume` — plus clearer `jeo --tmux` attach diagnostics, a tmux session-name double-dash fix, and a more robust no-leak probe gate.
 - **[0.6.32]** (2026-06-19) — Anthropic extended thinking is actually enabled now — the request finally sends a `thinking` block (adaptive for Opus/Sonnet 4.6+, budget for older), fixing reasoning on **opus-4-8** — plus a multi-token `/command`·`$skill` trigger highlight that paints every invocation and survives the trailing space, and a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.31]** (2026-06-19) — Live "Thinking" indicator for signature-only reasoning models (Anthropic opus-4-7/4-8), a live color cue when a `/command` or `$skill` trigger is recognized in the prompt, and a rich gjc-style `/resume` session picker — plus a fresh `jeo --tmux` no-leak re-verification.
 - **[0.6.30]** (2026-06-19) — gjc-style intermediate-judgment guard classification extracted from the engine loop, plus a re-verification that `jeo --tmux` does not leak bun memory or slow down.
-- **[0.6.29]** (2026-06-19) — Signature-only thinking-block replay (Anthropic opus-4-7/4-8), plus a tmux mouse-flood memory guard confirming `jeo --tmux` does not leak.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.6.33",
+  "version": "0.6.34",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",

package/src/agent/session.ts

@@ -10,6 +10,9 @@ export interface SessionHeader {
   timestamp: string;
   cwd: string;
   title?: string;
+  /** Model id pinned to this session; restored on resume so each session can carry
+   *  its own model independent of the global default (per-session model selection). */
+  model?: string;
 }
 
 export interface SessionEntry {
@@ -35,6 +38,8 @@ export interface SessionSummary {
   /** Session file size in bytes (for the resume picker's metadata line). */
   sizeBytes?: number;
   title?: string;
+  /** Model id pinned to this session (header `model`), if any. */
+  model?: string;
 }
 
 export const SESSION_VERSION = 1;
@@ -53,7 +58,8 @@ export function sessionPath(id: string, cwd = process.cwd()): string {
 
 export async function createSession(
   cwd = process.cwd(),
-  id = newSessionId()
+  id = newSessionId(),
+  model?: string
 ): Promise<{ id: string; path: string }> {
   const dir = sessionsDir(cwd);
   await fs.mkdir(dir, { recursive: true });
@@ -64,6 +70,7 @@ export async function createSession(
     id,
     timestamp: new Date().toISOString(),
     cwd,
+    ...(model ? { model } : {}),
   };
 
   const file = sessionPath(id, cwd);
@@ -292,6 +299,7 @@ export async function listSessions(cwd = process.cwd()): Promise<SessionSummary[
         mtimeMs: stat.mtimeMs,
         sizeBytes: stat.size,
         title: header.title,
+        model: header.model,
       });
     } catch {
       // Tolerate malformed files (skip them)
@@ -309,10 +317,16 @@ export async function latestSessionId(cwd = process.cwd()): Promise<string | und
 }
 
 /**
- * Rename a session by updating the title in its JSONL header.
- * Throws a clear Error if the session file does not exist.
+ * Locate the session's JSONL header, apply `mutate`, and rewrite the file in place.
+ * `mutate` returns false to signal "no change needed" (skips the write). Shared by
+ * {@link renameSession} and {@link updateSessionModel}. Throws a clear Error when the
+ * session file or its header is missing.
  */
-export async function renameSession(id: string, title: string, cwd = process.cwd()): Promise<void> {
+async function rewriteSessionHeader(
+  id: string,
+  mutate: (header: SessionHeader) => boolean,
+  cwd: string,
+): Promise<void> {
   const file = sessionPath(id, cwd);
   let content: string;
   try {
@@ -347,11 +361,35 @@ export async function renameSession(id: string, title: string, cwd = process.cwd
     throw new Error(`Session header missing in session ${id}`);
   }
 
-  header.title = title;
+  if (!mutate(header)) return;
   lines[headerIndex] = JSON.stringify(header);
   await fs.writeFile(file, lines.join("\n"), "utf8");
 }
 
+/**
+ * Rename a session by updating the title in its JSONL header.
+ * Throws a clear Error if the session file does not exist.
+ */
+export async function renameSession(id: string, title: string, cwd = process.cwd()): Promise<void> {
+  await rewriteSessionHeader(id, header => {
+    header.title = title;
+    return true;
+  }, cwd);
+}
+
+/**
+ * Pin a model to a session by updating the `model` field in its JSONL header so a
+ * later `/resume` restores it. No-op (no write) when the header already names that
+ * model. Throws a clear Error if the session file does not exist.
+ */
+export async function updateSessionModel(id: string, model: string, cwd = process.cwd()): Promise<void> {
+  await rewriteSessionHeader(id, header => {
+    if (header.model === model) return false;
+    header.model = model;
+    return true;
+  }, cwd);
+}
+
 /**
  * Delete a session file.
  * Returns false on ENOENT, true on success.

package/src/commands/launch/tmux.ts

@@ -14,7 +14,11 @@ function hashString(input: string): string {
 function tmuxSafeNamePart(input: string, max = 32): string {
   const safe = input.replace(/[^a-zA-Z0-9_-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "") || "value";
   if (safe.length <= max) return safe;
-  return `${safe.slice(0, Math.max(1, max - 7))}-${hashString(input)}`;
+  // Trim a trailing dash from the truncated head so a boundary landing right
+  // after a `-` doesn't produce an ugly `name--<hash>` (double dash). The head
+  // is guaranteed non-empty and to start with an alnum (safe is trimmed).
+  const head = safe.slice(0, Math.max(1, max - 7)).replace(/-+$/, "") || safe.slice(0, 1);
+  return `${head}-${hashString(input)}`;
 }
 
 function tmuxRuntimeSuffix(flags: LaunchFlags): string {

package/src/commands/launch.ts

@@ -91,6 +91,7 @@ import {
   latestSessionId,
   exportSession,
   renameSession,
+  updateSessionModel,
   deleteSession,
   sessionPath,
   appendCompaction,
@@ -383,8 +384,27 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           stdout: "inherit",
           stderr: "inherit",
         });
-        await attach.exited;
+        // A nonzero attach exit (e.g. "open terminal failed: not a terminal" when
+        // stdout isn't a real TTY, a too-small client, or a transient server error)
+        // otherwise vanished: jeo returned 0 and the freshly created session was left
+        // orphaned with no hint. Surface it. Only advise reattach when the session is
+        // STILL live — if the inner jeo already exited (bad args, instant crash) the
+        // session is gone and "reattach" would be misleading.
+        const attachCode = await attach.exited;
+        if (attachCode !== 0) {
+          const alive = Bun.spawnSync([tmuxBin, "has-session", "-t", `=${sessionName}`], {
+            stdout: "ignore",
+            stderr: "ignore",
+          }).exitCode === 0;
+          console.error(
+            alive
+              ? `Error: tmux attach failed (exit ${attachCode}). The session is still running; reattach with: tmux attach -t ${sessionName}`
+              : `Error: tmux session ${sessionName} ended before it could be attached (attach exit ${attachCode}).`,
+          );
+          process.exitCode = attachCode;
+        }
         return;
+
       } else {
         console.warn("warning: tmux is not available on PATH. Launching directly...");
       }
@@ -411,7 +431,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     }
     console.log("Saved sessions (newest first):");
     for (const s of sessions) {
-      console.log(`  ${s.id}  ${s.timestamp}  (${s.messageCount} msgs)  ${s.preview}`);
+      console.log(`  ${s.id}  ${s.timestamp}  (${s.messageCount} msgs)${s.model ? `  [${s.model}]` : ""}  ${s.preview}`);
     }
     console.log("\nResume with: jeo launch --resume <id>");
     return;
@@ -588,23 +608,37 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
       const id = flags.resumeId ?? (await latestSessionId(cwd));
       if (!id) {
         console.log("No session to resume. Starting a new one.");
-        sessionId = (await createSession(cwd)).id;
+        sessionId = (await createSession(cwd, undefined, sessionModel)).id;
       } else {
         try {
-          const { messages } = await loadSession(id, cwd);
+          const { header, messages } = await loadSession(id, cwd);
           for (const m of messages) history.push(m);
           sessionId = id;
-          console.log(`Resumed session ${id} (${messages.length} messages).`);
+          // Restore the model this session was last using unless the CLI explicitly
+          // pinned one (flags.model/role/provider → initialSessionModel wins).
+          if (!initialSessionModel && header.model) sessionModel = header.model;
+          const modelNote = sessionModel ? ` · model ${sessionModel}` : "";
+          console.log(`Resumed session ${id} (${messages.length} messages).${modelNote}`);
         } catch (err) {
           console.log(`Could not resume ${id}: ${(err as Error).message}. Starting fresh.`);
-          sessionId = (await createSession(cwd)).id;
+          sessionId = (await createSession(cwd, undefined, sessionModel)).id;
         }
       }
     } else {
-      sessionId = (await createSession(cwd)).id;
+      sessionId = (await createSession(cwd, undefined, sessionModel)).id;
     }
   }
 
+  // Persist the active per-session model into the session header so `/resume` restores
+  // it (each session can carry its own model independent of the global default).
+  // Best-effort: a header-rewrite failure must never abort the turn.
+  const persistSessionModel = async (): Promise<void> => {
+    if (flags.noSession || !sessionId || !sessionModel) return;
+    try {
+      await updateSessionModel(sessionId, sessionModel, cwd);
+    } catch { /* best-effort */ }
+  };
+
   // `step N/M` display seed: the explicit --max-steps cap, else the dynamic budget's
   // rolling base — the engine's onBudget event keeps the denominator honest as it grows.
   const initialStepLimit = flags.maxSteps > 0 ? flags.maxSteps : initialDynamicStepLimit();
@@ -1007,7 +1041,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
         history.length = 1;
         if (sessionId && !flags.noSession) {
           try {
-            sessionId = (await createSession(cwd)).id;
+            sessionId = (await createSession(cwd, undefined, sessionModel)).id;
           } catch { /* best-effort: in-memory clear already done */ }
         }
         console.log("(history cleared)");
@@ -2317,6 +2351,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
     const { resolved, provider } = await describeModel(target);
     const st = (await describeAllProviders(cfgForPick)).find(s => s.name === provider);
     sessionModel = target;
+    await persistSessionModel();
     const defaultThinking = isThinkingLevel(action) ? action : undefined;
     if (defaultThinking) {
       sessionThinking = defaultThinking;
@@ -2873,7 +2908,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
         const startFreshSession = async (verb: string): Promise<void> => {
           history.length = 1;
           if (!flags.noSession) {
-            sessionId = (await createSession(cwd)).id;
+            sessionId = (await createSession(cwd, undefined, sessionModel)).id;
             advanceSessionBoxColor(); // distinct input-box hue per newly opened session
             console.log(`(${verb} — new session ${sessionId})`);
           } else {
@@ -2916,10 +2951,12 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           const arg = tokens.slice(1).join(" ").trim();
           const applyResume = async (rid: string): Promise<void> => {
             try {
-              const { messages } = await loadSession(rid, cwd);
+              const { header, messages } = await loadSession(rid, cwd);
               history.length = 1;
               for (const m of messages) history.push(m);
               sessionId = rid;
+              // Restore the model this session was last using (per-session model).
+              if (header.model) sessionModel = header.model;
               // Seed /retry + reply marker from the last user/assistant turn.
               lastUserInput = ""; lastReply = "";
               for (let k = history.length - 1; k >= 1; k--) {
@@ -3497,6 +3534,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
             const qualified = qualifyModelId(modelArg, "openai");
             sessionModel = qualified;
             await saveConfigPatch(raw => rememberModelPatch(raw, qualified));
+            await persistSessionModel();
             console.log(`OpenAI-compatible endpoint set: ${url} · default model ${qualified} — saved to ~/.jeo/config.json.`);
           } else {
             console.log(`OpenAI-compatible endpoint set: ${url} — saved to ~/.jeo/config.json.`);
@@ -4012,6 +4050,7 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
           // MRU persistence: picking a model IS saving it — the newest pick wins
           // as the global default; recents keep the rotation for every session.
           await saveConfigPatch(raw => rememberModelPatch(raw, arg));
+          await persistSessionModel();
         }
         const { resolved, provider } = await describeModel(label);
         const st = statuses.find(s => s.name === provider);