jeo-code 0.9.8 → 0.9.10

package/CHANGELOG.md

@@ -8,6 +8,27 @@ The README mirrors the latest 5 entries — regenerate with `bun run changelog:s
 
 ## [Unreleased]
 
+## [0.9.10] - 2026-07-27
+_`jeo update` now verifies the binary you actually run, and recovers from bun's stale registry cache._
+
+### Fixed
+- **`jeo update` claimed success while the machine still ran the old build** (`src/commands/update.ts`) — a package manager's zero exit was treated as proof of an update. In practice bun can fail to resolve a just-published version (`No version matching "x.y.z" ... (but package exists)`) from a stale manifest, jeo then fell back to npm, npm installed into a prefix the user's PATH does not resolve, and the command printed `Successfully installed` while `jeo --version` still reported the previous release. The install now retries bun with `--force` (which re-resolves against the registry) before falling back to npm, stops only once the binary on PATH reports the requested version, and reports a stale active binary as a failure (exit 1, `installed: false` in `--json`) with the exact recovery commands.
+
+### Verified
+- Update suite: 33 pass / 0 fail, including the new stale-active-binary failure, its `--json` shape, and the bun `--force` retry ordering.
+- Reproduced live: `bun install -g jeo-code@0.9.9` resolved nothing from cache while `--force` installed it correctly.
+
+## [0.9.9] - 2026-07-27
+_Root-causes the frozen `jeo --tmux` TUI: the window was pinned to its launch size, so resizing the terminal only cut the view._
+
+### Fixed
+- **`jeo --tmux` no longer freezes the window at its launch geometry** (`src/commands/launch.ts`, `src/commands/launch/tmux.ts`) — the pre-attach `tmux resize-window` flipped the window's `window-size` option to `manual` as a documented side effect, permanently detaching it from the attached client. Resizing the terminal then left the tmux window frozen: the pane was shown cut/letterboxed and jeo never received SIGWINCH, so no amount of in-app reflow could help. The redundant `resize-window` is gone (`new-session -x/-y` already sizes the detached window), and every jeo-owned session now explicitly asserts `window-size latest`, which also protects users whose `tmux.conf` sets `manual` globally.
+
+### Verified
+- Live tmux 3.6a: attached client 100x30 → window 100x29, 140x40 → 140x39, 72x20 → 72x19, with the TUI reflowing at each step.
+- Control run reproducing the old behaviour: with `window-size manual` the window stayed 80x24 under a 120x36 client (the reported truncation); restoring `latest` recovered instantly.
+- tmux suite: 18 pass / 0 fail, including new assertions that the launch flow never issues `resize-window` and always sets `window-size latest`.
+
 ## [0.9.8] - 2026-07-27
 _The provider model list now persists and rehydrates, so an account's live models survive across launches (gjc parity)._
 

package/README.ja.md

@@ -285,10 +285,10 @@ CI は `.github/workflows/npm-publish.yml` で公開します — GitHub リリ
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.9.10]** (2026-07-27) — `jeo update` now verifies the binary you actually run, and recovers from bun's stale registry cache.
+- **[0.9.9]** (2026-07-27) — Root-causes the frozen `jeo --tmux` TUI: the window was pinned to its launch size, so resizing the terminal only cut the view.
 - **[0.9.8]** (2026-07-27) — The provider model list now persists and rehydrates, so an account's live models survive across launches (gjc parity).
 - **[0.9.7]** (2026-07-27) — Fixes the broken 0.9.3-0.9.6 npm releases: `jeo` and `jeo --tmux` crashed at startup right after `jeo update`.
-- **[0.9.6]** (2026-07-27) — Resize-safe ledger flush and terminal clear handling after viewport shrink.
-- **[0.9.5]** (2026-07-27) — Resize-safe live TUI rendering for terminal viewport shrink/grow transitions.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.ko.md

@@ -286,10 +286,10 @@ CI는 `.github/workflows/npm-publish.yml`로 배포합니다 — GitHub 릴리
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.9.10]** (2026-07-27) — `jeo update` now verifies the binary you actually run, and recovers from bun's stale registry cache.
+- **[0.9.9]** (2026-07-27) — Root-causes the frozen `jeo --tmux` TUI: the window was pinned to its launch size, so resizing the terminal only cut the view.
 - **[0.9.8]** (2026-07-27) — The provider model list now persists and rehydrates, so an account's live models survive across launches (gjc parity).
 - **[0.9.7]** (2026-07-27) — Fixes the broken 0.9.3-0.9.6 npm releases: `jeo` and `jeo --tmux` crashed at startup right after `jeo update`.
-- **[0.9.6]** (2026-07-27) — Resize-safe ledger flush and terminal clear handling after viewport shrink.
-- **[0.9.5]** (2026-07-27) — Resize-safe live TUI rendering for terminal viewport shrink/grow transitions.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.md

@@ -293,10 +293,10 @@ Huge thanks to [gajae-code](https://github.com/Yeachan-Heo/gajae-code) for the i
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.9.10]** (2026-07-27) — `jeo update` now verifies the binary you actually run, and recovers from bun's stale registry cache.
+- **[0.9.9]** (2026-07-27) — Root-causes the frozen `jeo --tmux` TUI: the window was pinned to its launch size, so resizing the terminal only cut the view.
 - **[0.9.8]** (2026-07-27) — The provider model list now persists and rehydrates, so an account's live models survive across launches (gjc parity).
 - **[0.9.7]** (2026-07-27) — Fixes the broken 0.9.3-0.9.6 npm releases: `jeo` and `jeo --tmux` crashed at startup right after `jeo update`.
-- **[0.9.6]** (2026-07-27) — Resize-safe ledger flush and terminal clear handling after viewport shrink.
-- **[0.9.5]** (2026-07-27) — Resize-safe live TUI rendering for terminal viewport shrink/grow transitions.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/README.zh.md

@@ -285,10 +285,10 @@ CI 通过 `.github/workflows/npm-publish.yml` 发布 — GitHub 发布 release
 
 <!-- CHANGELOG:START (auto-generated from CHANGELOG.md — run `bun run changelog:sync`) -->
 - **[Unreleased]**
+- **[0.9.10]** (2026-07-27) — `jeo update` now verifies the binary you actually run, and recovers from bun's stale registry cache.
+- **[0.9.9]** (2026-07-27) — Root-causes the frozen `jeo --tmux` TUI: the window was pinned to its launch size, so resizing the terminal only cut the view.
 - **[0.9.8]** (2026-07-27) — The provider model list now persists and rehydrates, so an account's live models survive across launches (gjc parity).
 - **[0.9.7]** (2026-07-27) — Fixes the broken 0.9.3-0.9.6 npm releases: `jeo` and `jeo --tmux` crashed at startup right after `jeo update`.
-- **[0.9.6]** (2026-07-27) — Resize-safe ledger flush and terminal clear handling after viewport shrink.
-- **[0.9.5]** (2026-07-27) — Resize-safe live TUI rendering for terminal viewport shrink/grow transitions.
 
 See [CHANGELOG.md](CHANGELOG.md) for the full history.
 <!-- CHANGELOG:END -->

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jeo-code",
-  "version": "0.9.8",
+  "version": "0.9.10",
   "description": "Clean, highly optimized AI coding agent using spec-first loop",
   "type": "module",
   "main": "src/cli.ts",

package/src/commands/launch/tmux.ts

@@ -193,6 +193,17 @@ export function tmuxProfileCommands(
 ): TmuxProfileCommand[] {
   const t = `=${target}:`;
   const commands: TmuxProfileCommand[] = [];
+  // Follow the attached client's geometry, always. tmux's default is already
+  // `latest`, but ANY `resize-window` (jeo's own, a user keybinding, a wrapper
+  // script) silently flips the window to `manual`, and a user's tmux.conf may set
+  // `manual` globally. A manual window never resizes with the terminal: jeo's pane
+  // stays frozen at its launch size, gets shown letterboxed/cut, and jeo never sees
+  // SIGWINCH so it cannot reflow either. Asserting `latest` per jeo session makes
+  // the live TUI track every terminal resize.
+  commands.push({
+    description: "track the attached client's size (never freeze the window)",
+    args: ["set-window-option", "-t", t, "window-size", "latest"],
+  });
   if (env.JEO_TMUX_MOUSE !== "0") {
     commands.push({
       description: "enable tmux mouse scrolling (wheel-up → copy-mode over real history)",

package/src/commands/launch.ts

@@ -491,13 +491,15 @@ export async function runLaunchCommand(args: string[]): Promise<void> {
             : `Starting new independent tmux session: ${sessionName} (another live jeo session already owns ${sessionBase}; reattach later with: tmux attach -t ${sessionName})`,
         );
 
-        // Re-assert the caller dimensions right before attach (best-effort): profile
-        // commands or a slow first frame can land while the window is still detached.
-        if (termSize) {
-          try {
-            Bun.spawnSync([tmuxBin, "resize-window", "-t", `=${sessionName}`, "-x", String(termSize.columns), "-y", String(termSize.rows)]);
-          } catch { /* best-effort — old tmux without resize-window is fine */ }
-        }
+        // NOTE: never `tmux resize-window` here. tmux flips the window's `window-size`
+        // option to `manual` as a side effect of that command, which permanently
+        // detaches the window from the attached client's geometry — the terminal is
+        // resized, tmux keeps the window frozen at its old size, and the pane is shown
+        // letterboxed/cut with jeo never receiving SIGWINCH (the "TUI is stuck at the
+        // launch size and the screen is cut" report). `new-session -x/-y` already
+        // creates the detached window at the caller's size, and `window-size latest`
+        // (asserted in tmuxProfileCommands) makes the attach and every later terminal
+        // resize track the client automatically.
 
         const attach = Bun.spawn([tmuxBin, "attach-session", "-t", `=${sessionName}`], {
           stdin: "inherit",

package/src/commands/update.ts

@@ -43,6 +43,36 @@ export interface UpdateDeps {
   activeVersion?: () => string | null;
 }
 
+/**
+ * Ordered install attempts for `target` (`jeo-code@<version>`).
+ *
+ * `bun install -g` alone is not enough in practice: right after a publish bun can
+ * still hold a stale registry manifest and fail with `No version matching "<v>"
+ * found ... (but package exists)`. `--force` re-resolves against the registry and
+ * is what actually recovers that state. npm remains the last resort for
+ * npm-installed globals. Pure so the policy is unit-testable without spawning.
+ */
+export function installCandidates(target: string): string[][] {
+  return [
+    ["bun", "install", "-g", target],
+    // Cache-buster: bun's resolver held a stale manifest for a just-published version.
+    ["bun", "install", "-g", target, "--force"],
+    ["npm", "install", "-g", target],
+  ];
+}
+
+/** Version of the `jeo` binary PATH actually resolves, or null when unreadable. */
+function readActiveVersion(): string | null {
+  try {
+    const proc = Bun.spawnSync(["jeo", "--version"], { stdout: "pipe", stderr: "pipe" });
+    if (!proc.success) return null;
+    const out = new TextDecoder().decode(proc.stdout);
+    const m = out.match(/(\d+\.\d+\.\d+(?:-[\w.]+)?)/);
+    return m ? m[1] : null;
+  } catch {
+    return null;
+  }
+}
 export const defaultDeps: UpdateDeps = {
   fetchJson: async (url: string, options?: { signal?: AbortSignal }) => {
     const res = await fetch(url, options);
@@ -65,17 +95,20 @@ export const defaultDeps: UpdateDeps = {
     // Self-update the global install via the SAME toolchain it was installed with. jeo
     // ships as a `#!/usr/bin/env bun` script so bun is the common case, but npm-installed
     // globals exist too — try bun first, fall back to npm (and tolerate either missing).
-    // `@<version>` (the resolved latest) forces the newest publish past a stale global cache.
     const target = `jeo-code@${version ?? "latest"}`;
-    const managers: string[][] = [
-      ["bun", "install", "-g", target],
-      ["npm", "install", "-g", target],
-    ];
     let lastErr = "";
-    for (const cmd of managers) {
+    for (const cmd of installCandidates(target)) {
       try {
         const proc = Bun.spawnSync(cmd, { stdout: "inherit", stderr: "inherit" });
-        if (proc.success) return { success: true };
+        if (proc.success) {
+          // A zero exit is NOT proof the user's `jeo` moved: npm's global prefix is
+          // often a different directory than the bun prefix PATH actually resolves,
+          // so an npm fallback can "succeed" while the active binary is untouched.
+          // Only stop once the binary on PATH really reports the requested version.
+          if (!version || readActiveVersion() === version) return { success: true };
+          lastErr = `${cmd[0]} reported success but the active 'jeo' is still ${readActiveVersion() ?? "unknown"}`;
+          continue;
+        }
         lastErr = `${cmd[0]} exited with code ${proc.exitCode}`;
       } catch (err: any) {
         lastErr = `${cmd[0]} unavailable: ${err?.message ?? String(err)}`;
@@ -84,20 +117,10 @@ export const defaultDeps: UpdateDeps = {
     return { success: false, stderr: lastErr };
   }
 ,
-  activeVersion: () => {
-    // Read the version of the `jeo` actually on PATH (may differ from this process's bundled
-    // version after a self-update, e.g. when bun installed to ~/.bun/bin but PATH prefers an
-    // npm global). Used to detect a silent "installed but PATH unchanged" no-op.
-    try {
-      const proc = Bun.spawnSync(["jeo", "--version"], { stdout: "pipe", stderr: "pipe" });
-      if (!proc.success) return null;
-      const out = new TextDecoder().decode(proc.stdout);
-      const m = out.match(/(\d+\.\d+\.\d+(?:-[\w.]+)?)/);
-      return m ? m[1] : null;
-    } catch {
-      return null;
-    }
-  }
+  // Version of the `jeo` actually on PATH — may differ from this process's bundled
+  // version after a self-update (e.g. npm installed into a prefix PATH does not
+  // resolve). Detects the silent "installed but PATH unchanged" no-op.
+  activeVersion: readActiveVersion
   ,
   showWhatsNew: () => {
     try {
@@ -279,25 +302,31 @@ export async function runUpdateCommandWith(args: string[], deps: UpdateDeps): Pr
       try {
         const result = await deps.install(latest ?? undefined);
         if (result.success) {
+          // A package manager's zero exit does not prove the user's `jeo` moved: npm's
+          // global prefix is frequently a different directory than the one PATH resolves,
+          // so the install lands somewhere the user never runs. Verify the ACTIVE binary
+          // and treat a still-stale one as a failed update (exit 1) rather than printing
+          // a success line the machine contradicts.
+          const active = deps.activeVersion?.();
+          const stale = !!(active && latest && compareVersions(active, latest) < 0);
           if (hasJson) {
             console.log(JSON.stringify({
               current,
               latest,
               upToDate: false,
-              installed: true
+              installed: !stale,
+              ...(stale ? { activeVersion: active, error: "active jeo still reports an older version" } : {}),
             }));
+            if (stale) process.exitCode = 1;
+          } else if (stale) {
+            console.error(`[FAILED] Installed jeo-code@${latest}, but the active 'jeo' on PATH still reports ${active}.`);
+            console.error(`The install landed in a prefix your PATH does not use. Fix it with one of:`);
+            console.error(`  bun install -g jeo-code@${latest} --force`);
+            console.error(`  npm install -g jeo-code@${latest}`);
+            console.error(`Then confirm with: jeo --version`);
+            process.exitCode = 1;
           } else {
             console.log(`Successfully installed jeo-code@${latest}`);
-            // Verify the `jeo` on PATH actually picked up the new install — a bun-vs-npm or
-            // PATH mismatch can leave an older binary in front, which looks like "update did
-            // nothing". Surface that loudly with the manual fix instead of failing silently.
-            const active = deps.activeVersion?.();
-            if (active && latest && compareVersions(active, latest) < 0) {
-              console.warn(`Warning: installed ${latest}, but the active 'jeo' on PATH still reports ${active}.`);
-              console.warn(`Your PATH points at a different install. Fix it with one of:`);
-              console.warn(`  npm install -g jeo-code@${latest}`);
-              console.warn(`  bun install -g jeo-code@${latest}`);
-            }
             deps.showWhatsNew?.();
           }
         } else {