jeo-code 0.7.29 → 0.7.30

package/CHANGELOG.md

@@ -6,6 +6,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 The README mirrors the latest 5 entries — regenerate with `bun run changelog:sync`.
 
+## [0.7.30] - 2026-07-02
+_GPT/Codex OAuth calls work again, and the 30-minute turn budget now limits no-progress stalls instead of killing genuinely progressing autonomous runs._
+
+### Fixed
+- **GPT/Codex OAuth no longer sends `max_output_tokens` to the ChatGPT/Codex backend.** `0.7.28` moved the computed output cap onto the shared Responses payload, but the OAuth Codex endpoint rejects that public-API-only parameter with `HTTP 400 {"detail":"Unsupported parameter: max_output_tokens"}`. The cap is now applied only on the public `/v1/responses` API-key path; OAuth requests keep using the Codex backend shape that `jeo doctor` probes.
+- **`JEO_TURN_MAX_MS` is now a stall budget, not an absolute kill switch.** The old implementation measured 30 minutes from turn start and could terminate a long autonomous run even while it was still executing tools and making progress. The clock now resets on every executed tool step and on mid-turn steering, so it only stops no-progress loops such as refusal backoff spins, endless provider retries, or bounce loops. The existing step hard cap and repeat/cycle/failure guards still bound genuinely long runs.
+
+### Verified
+- `bun test` green — 2147 pass / 0 fail across 244 files; `bun run typecheck` clean.
+- Live GPT/Codex OAuth smoke tests through the installed `jeo` symlink: `jeo chat "Say exactly: hello" --model gpt-5.5` and `jeo chat "Reply with one word: pong" --model gpt-5.5` both returned the requested text. Added/updated regression coverage in `test/codex-responses.test.ts` and `test/cycle-and-turn-budget.test.ts`.
+
 ## [0.7.29] - 2026-07-02
 _gajae-code safety-refusal retry parity: Anthropic/OAuth content-classifier refusals no longer end the turn with a fatal "declined to answer" message after the context-reset ladder._
 

package/README.ja.md

@@ -205,11 +205,11 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 ## 変更履歴 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.7.30]** (2026-07-02) — GPT/Codex OAuth calls work again, and the 30-minute turn budget now limits no-progress stalls instead of killing genuinely progressing autonomous runs.
 - **[0.7.29]** (2026-07-02) — gajae-code safety-refusal retry parity: Anthropic/OAuth content-classifier refusals no longer end the turn with a fatal "declined to answer" message after the context-reset ladder.
 - **[0.7.28]** (2026-07-02) — gajae-code 0.7.9–0.7.10 OAuth + model-execution parity: generic long rate-limit windows are retried (never fatal), retry waits are abort-cancellable, Codex prompt caching via session correlation, and the Kimi Code device-flow OAuth is completed end-to-end (catalog, gating, discovery, tests).
 - **[0.7.27]** (2026-07-02) — Extended-keyboard decode layer: Esc/Ctrl+C work again on kitty-protocol terminals, Shift+Enter breaks lines on every terminal incl. Windows, row/draft-aware Cmd+←→/↑↓ + Home/End/Ctrl+Home/End, Ctrl+V text-paste fallback. Plus Anthropic 5th-gen omp-parity: catalog-derived output budgets end thinking-vs-reply starvation; refusals fail fast at the transport and the recovery ladder strips replayed thinking blocks.
 - **[0.7.26]** (2026-07-02) — Esc/Ctrl+C reliably clears the input box (fixes a gate the earlier reorder missed), and un-bracketed multi-line pastes no longer shred into premature per-line submits.
-- **[0.7.25]** (2026-07-02) — Shift+Enter now reliably distinguishable from Enter on kitty/WezTerm/iTerm2/xterm via modifyOtherKeys + kitty keyboard protocol; row-aware Home/End and Cmd+Left/Right in multi-row drafts.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -205,11 +205,11 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 ## 변경 이력 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.7.30]** (2026-07-02) — GPT/Codex OAuth calls work again, and the 30-minute turn budget now limits no-progress stalls instead of killing genuinely progressing autonomous runs.
 - **[0.7.29]** (2026-07-02) — gajae-code safety-refusal retry parity: Anthropic/OAuth content-classifier refusals no longer end the turn with a fatal "declined to answer" message after the context-reset ladder.
 - **[0.7.28]** (2026-07-02) — gajae-code 0.7.9–0.7.10 OAuth + model-execution parity: generic long rate-limit windows are retried (never fatal), retry waits are abort-cancellable, Codex prompt caching via session correlation, and the Kimi Code device-flow OAuth is completed end-to-end (catalog, gating, discovery, tests).
 - **[0.7.27]** (2026-07-02) — Extended-keyboard decode layer: Esc/Ctrl+C work again on kitty-protocol terminals, Shift+Enter breaks lines on every terminal incl. Windows, row/draft-aware Cmd+←→/↑↓ + Home/End/Ctrl+Home/End, Ctrl+V text-paste fallback. Plus Anthropic 5th-gen omp-parity: catalog-derived output budgets end thinking-vs-reply starvation; refusals fail fast at the transport and the recovery ladder strips replayed thinking blocks.
 - **[0.7.26]** (2026-07-02) — Esc/Ctrl+C reliably clears the input box (fixes a gate the earlier reorder missed), and un-bracketed multi-line pastes no longer shred into premature per-line submits.
-- **[0.7.25]** (2026-07-02) — Shift+Enter now reliably distinguishable from Enter on kitty/WezTerm/iTerm2/xterm via modifyOtherKeys + kitty keyboard protocol; row-aware Home/End and Cmd+Left/Right in multi-row drafts.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -232,11 +232,11 @@ Huge thanks to [gajae-code](https://github.com/Yeachan-Heo/gajae-code) for the i
 ## Changelog
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.7.30]** (2026-07-02) — GPT/Codex OAuth calls work again, and the 30-minute turn budget now limits no-progress stalls instead of killing genuinely progressing autonomous runs.
 - **[0.7.29]** (2026-07-02) — gajae-code safety-refusal retry parity: Anthropic/OAuth content-classifier refusals no longer end the turn with a fatal "declined to answer" message after the context-reset ladder.
 - **[0.7.28]** (2026-07-02) — gajae-code 0.7.9–0.7.10 OAuth + model-execution parity: generic long rate-limit windows are retried (never fatal), retry waits are abort-cancellable, Codex prompt caching via session correlation, and the Kimi Code device-flow OAuth is completed end-to-end (catalog, gating, discovery, tests).
 - **[0.7.27]** (2026-07-02) — Extended-keyboard decode layer: Esc/Ctrl+C work again on kitty-protocol terminals, Shift+Enter breaks lines on every terminal incl. Windows, row/draft-aware Cmd+←→/↑↓ + Home/End/Ctrl+Home/End, Ctrl+V text-paste fallback. Plus Anthropic 5th-gen omp-parity: catalog-derived output budgets end thinking-vs-reply starvation; refusals fail fast at the transport and the recovery ladder strips replayed thinking blocks.
 - **[0.7.26]** (2026-07-02) — Esc/Ctrl+C reliably clears the input box (fixes a gate the earlier reorder missed), and un-bracketed multi-line pastes no longer shred into premature per-line submits.
-- **[0.7.25]** (2026-07-02) — Shift+Enter now reliably distinguishable from Enter on kitty/WezTerm/iTerm2/xterm via modifyOtherKeys + kitty keyboard protocol; row-aware Home/End and Cmd+Left/Right in multi-row drafts.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -205,11 +205,11 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 ## 更新日志 (Changelog)
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
+- **[0.7.30]** (2026-07-02) — GPT/Codex OAuth calls work again, and the 30-minute turn budget now limits no-progress stalls instead of killing genuinely progressing autonomous runs.
 - **[0.7.29]** (2026-07-02) — gajae-code safety-refusal retry parity: Anthropic/OAuth content-classifier refusals no longer end the turn with a fatal "declined to answer" message after the context-reset ladder.
 - **[0.7.28]** (2026-07-02) — gajae-code 0.7.9–0.7.10 OAuth + model-execution parity: generic long rate-limit windows are retried (never fatal), retry waits are abort-cancellable, Codex prompt caching via session correlation, and the Kimi Code device-flow OAuth is completed end-to-end (catalog, gating, discovery, tests).
 - **[0.7.27]** (2026-07-02) — Extended-keyboard decode layer: Esc/Ctrl+C work again on kitty-protocol terminals, Shift+Enter breaks lines on every terminal incl. Windows, row/draft-aware Cmd+←→/↑↓ + Home/End/Ctrl+Home/End, Ctrl+V text-paste fallback. Plus Anthropic 5th-gen omp-parity: catalog-derived output budgets end thinking-vs-reply starvation; refusals fail fast at the transport and the recovery ladder strips replayed thinking blocks.
 - **[0.7.26]** (2026-07-02) — Esc/Ctrl+C reliably clears the input box (fixes a gate the earlier reorder missed), and un-bracketed multi-line pastes no longer shred into premature per-line submits.
-- **[0.7.25]** (2026-07-02) — Shift+Enter now reliably distinguishable from Enter on kitty/WezTerm/iTerm2/xterm via modifyOtherKeys + kitty keyboard protocol; row-aware Home/End and Cmd+Left/Right in multi-row drafts.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.7.29",
+  "version": "0.7.30",
 
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",

package/src/agent/engine.ts

@@ -286,10 +286,12 @@ export interface AgentLoopResult {
 }
 
 
-/** Wall-clock budget for ONE agent turn (ms). JEO_TURN_MAX_MS overrides; 0 disables.
- *  Default 30 minutes: long autonomous runs stay alive, while a turn that spins in
- *  "thinking" (huge contexts, endless extensions) is guaranteed to terminate into
- *  the consolidation wrap-up instead of running for hours. */
+/** Wall-clock STALL budget for ONE agent turn (ms): the maximum time a turn may run
+ *  WITHOUT PROGRESS (no executed tool step). JEO_TURN_MAX_MS overrides; 0 disables.
+ *  Default 30 minutes: long autonomous runs that keep executing tools stay alive
+ *  indefinitely (the step budget's hard cap bounds them), while a turn that spins in
+ *  "thinking" (refusal backoff, endless provider retries) is guaranteed to terminate
+ *  into the consolidation wrap-up instead of running for hours. */
 export function turnMaxMs(env: Record<string, string | undefined> = process.env): number {
   const raw = jeoEnv("TURN_MAX_MS", env);
   if (raw !== undefined && raw !== "") {
@@ -364,12 +366,18 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
   const ev = opts.events ?? {};
   const maxHistoryTokens = Math.max(10_000, opts.maxHistoryTokens ?? 80_000);
 
-  // Wall-clock turn budget — the definitive "never sits in thinking forever"
-  // guarantee. Step budgets bound the COUNT of model calls; this bounds their total
-  // TIME: a turn that crosses it stops at the next loop boundary and consolidates a
-  // wrap-up instead of spinning for hours under a generous dynamic step cap.
+  // Wall-clock STALL budget — the definitive "never sits in thinking forever"
+  // guarantee. Step budgets bound the COUNT of model calls; this bounds the time a
+  // turn may spend WITHOUT PROGRESS (no executed tool step): refusal-backoff spins,
+  // endless provider retries, and bounce loops terminate into the consolidation
+  // wrap-up, while a long-running turn that keeps executing tools stays alive —
+  // its termination is owned by the step budget's hard cap and the spin guards.
+  // Field regression this replaces: an ABSOLUTE 30m budget measured from turn start
+  // killed genuinely progressing autonomous runs mid-work.
   const turnStartedAt = Date.now();
   const turnBudgetMs = turnMaxMs();
+  // Reset on every executed tool step and on mid-turn steering.
+  let lastProgressAt = turnStartedAt;
   // "steps" | "time" — drives honest wording in the consolidation message.
   let stopKind: "steps" | "time" = "steps";
   let step = 1;
@@ -449,7 +457,8 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
   // ladder is exhausted the loop keeps resending with capped exponential backoff
   // instead of surfacing a terminal error (gjc parity: a refusal is retried until
   // it clears or the user cancels — Esc aborts the backoff wait via opts.signal,
-  // and the turn wall-clock budget still bounds the whole turn).
+  // and the stall budget bounds the spin: refusals execute no tools, so the
+  // no-progress clock keeps ticking and terminates the turn at JEO_TURN_MAX_MS).
   const MAX_REFUSAL_RETRIES = GUARD_LIMITS.MAX_REFUSAL_RETRIES;
   let refusalRetries = 0;
   let lastSig = "";
@@ -475,9 +484,9 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
   // schemas ONCE instead of rebuilding/reallocating the list on every step.
   const turnToolSchemas = nativeToolSchemasFor(Object.keys(tools));
   while (true) {
-    if (turnBudgetMs > 0 && Date.now() - turnStartedAt > turnBudgetMs) {
+    if (turnBudgetMs > 0 && Date.now() - lastProgressAt > turnBudgetMs) {
       stopKind = "time";
-      budgetStopReason = `turn wall-clock budget of ${Math.round(turnBudgetMs / 60_000)}m exceeded (JEO_TURN_MAX_MS) without done`;
+      budgetStopReason = `no tool progress for ${Math.round(turnBudgetMs / 60_000)}m — turn stall budget (JEO_TURN_MAX_MS) exceeded without done`;
       break;
     }
     if (step > budget.limit()) {
@@ -515,6 +524,7 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
         consecutiveFailures = 0;
         recentStepSigs.length = 0;
         budget.noteSteer?.();
+        lastProgressAt = Date.now(); // fresh instruction = fresh progress window
       }
     }
 
@@ -618,8 +628,9 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
       //      backoff instead of surfacing a terminal error (gjc parity: gjc's
       //      session auto-retry classifies a refusal as retryable and never ends
       //      the turn on it). Esc/cancel aborts the wait via opts.signal and the
-      //      loop-top check turns it into "Cancelled."; JEO_TURN_MAX_MS still
-      //      bounds the whole turn.
+      //      loop-top check turns it into "Cancelled."; the JEO_TURN_MAX_MS stall
+      //      budget still bounds the spin (a refusal loop executes no tools, so
+      //      the no-progress clock never resets).
       if (isRefusalError(err)) {
         refusalRetries++;
         if (refusalRetries === 1) {
@@ -1133,6 +1144,8 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
     // repeated call's ACTUAL last outcome (A). A skipped/bounced step never reaches
     // here, so this always holds the last REAL execution's results.
     lastResults = results;
+    // Executed tool step = progress: the stall budget clocks time WITHOUT this.
+    if (results.some(r => r.executed)) lastProgressAt = Date.now();
     step++;
   }
 
@@ -1143,7 +1156,7 @@ export async function runAgentLoop(history: Message[], opts: AgentLoopOptions):
   const extInfo = budget.extensionsUsed() > 0 ? ` after ${budget.extensionsUsed()} extension(s)` : "";
   const stopInfo = budgetStopReason ? `; ${budgetStopReason}` : "";
   const budgetLabel = stopKind === "time"
-    ? `turn time budget of ${Math.round(turnBudgetMs / 60_000)}m reached`
+    ? `turn time budget of ${Math.round(turnBudgetMs / 60_000)}m reached (no tool progress)`
     : `step budget of ${budget.limit()} reached`;
   try {
     if (!opts.signal?.aborted) {

package/src/ai/providers/openai-responses.ts

@@ -126,13 +126,14 @@ export function codexResponsesRequest(
     // frame can show the model's thinking instead of a frozen "calling model (Ns)…".
     payload.reasoning = { effort: options.reasoningEffort, summary: "auto" };
   }
-  // Cap the response length (gjc parity): the computed per-call budget must reach the wire,
-  // otherwise the backend free-runs to its own default.
-  if (options.maxTokens) payload.max_output_tokens = options.maxTokens;
+  // Cap the response length (gjc parity) on the PUBLIC Responses API only. The ChatGPT/Codex
+  // OAuth backend 400s on this parameter ({"detail":"Unsupported parameter: max_output_tokens"}),
+  // so the cap is applied inside the api_key branch below.
   // OAuth → the undocumented ChatGPT/Codex backend (codex headers + account-id).
   // API key → the public OpenAI Responses API (`/v1/responses`) with a plain Bearer.
   // Both speak the same Responses schema (the body above), so only url+headers differ.
   if (credential.kind === "api_key") {
+    if (options.maxTokens) payload.max_output_tokens = options.maxTokens;
     const base = (options.baseUrl ?? "https://api.openai.com/v1").replace(/\/$/, "");
     // Stateless reasoning replay (public Responses API): ask for encrypted reasoning content
     // so it can be captured and threaded back into a later `input` (store stays false).