klyro 1.0.13 → 1.0.16

package/dist/tui/app.test.js

@@ -246,7 +246,7 @@ describe('App', () => {
         await new Promise((r) => setTimeout(r, 30));
         expect(lastFrame() ?? '').toContain('first recallable prompt');
     });
-    it('↑ on empty input scrolls one line instead of history', async () => {
+    it('↑ on empty input with no history is a no-op (arrows never scroll)', async () => {
         // No prompts submitted yet → history is empty → viewport scrolls.
         const { stdin, lastFrame } = render(_jsx(App, { initialModel: "m", maxSteps: 10, cwd: "/test", onPrompt: async () => { }, onSlash: async () => { }, isFullscreen: true, initialTranscript: makeInitialTranscript(25) }));
         await new Promise((r) => setTimeout(r, 50));
@@ -257,7 +257,7 @@ describe('App', () => {
         await new Promise((r) => setTimeout(r, 30));
         expect(lastFrame() ?? '').toMatch(/MSG-00-tag/);
     });
-    it('↑ at live tail recalls history; scrolled up it scrolls (both kept)', async () => {
+    it('↑ recalls history at the tail and while scrolled up (never scrolls)', async () => {
         const onPrompt = vi.fn(async () => { });
         const { stdin, lastFrame } = render(_jsx(App, { initialModel: "m", maxSteps: 10, cwd: "/test", onPrompt: onPrompt, onSlash: async () => { }, isFullscreen: true, initialTranscript: makeInitialTranscript(25) }));
         await new Promise((r) => setTimeout(r, 50));
@@ -274,7 +274,7 @@ describe('App', () => {
         await new Promise((r) => setTimeout(r, 30));
         expect(lastFrame() ?? '').toContain('zzrecallme!');
     });
-    it('↑ while scrolled up keeps scrolling and leaves input empty', async () => {
+    it('↑ while scrolled up recalls history instead of scrolling', async () => {
         const { stdin, lastFrame } = render(_jsx(App, { initialModel: "m", maxSteps: 10, cwd: "/test", onPrompt: async () => { }, onSlash: async () => { }, isFullscreen: true, initialTranscript: makeInitialTranscript(25) }));
         await new Promise((r) => setTimeout(r, 50));
         stdin.write('zznoscroll');
@@ -283,14 +283,43 @@ describe('App', () => {
         await new Promise((r) => setTimeout(r, 50));
         stdin.write(KEY_HOME);
         await new Promise((r) => setTimeout(r, 30));
-        // Scrolled up + empty input + ↑ → scroll (MSG-00 stays), input untouched:
-        // typing '!' must NOT extend the submitted prompt.
+        // Scrolled up + empty input + ↑ → recalls into the input line (viewport
+        // untouched, MSG-00 stays): typing '!' must extend the recalled prompt.
         stdin.write('\x1b[A');
         await new Promise((r) => setTimeout(r, 30));
         expect(lastFrame() ?? '').toMatch(/MSG-00-tag/);
         stdin.write('!');
         await new Promise((r) => setTimeout(r, 30));
-        expect(lastFrame() ?? '').not.toContain('zznoscroll!');
+        expect(lastFrame() ?? '').toContain('zznoscroll!');
+    });
+    it('Ctrl+P / Ctrl+N browse history without arrow keys', async () => {
+        const onPrompt = vi.fn(async () => { });
+        const { stdin, lastFrame } = render(_jsx(App, { initialModel: "m", maxSteps: 10, cwd: "/test", onPrompt: onPrompt, onSlash: async () => { } }));
+        stdin.write('zzfirst');
+        await new Promise((r) => setTimeout(r, 20));
+        stdin.write('\x0d');
+        await new Promise((r) => setTimeout(r, 50));
+        stdin.write('zzsecond');
+        await new Promise((r) => setTimeout(r, 20));
+        stdin.write('\x0d');
+        await new Promise((r) => setTimeout(r, 50));
+        expect(onPrompt).toHaveBeenCalledTimes(2);
+        // Ctrl+P recalls newest-first with zero escape sequences involved.
+        stdin.write('\x10');
+        await new Promise((r) => setTimeout(r, 30));
+        stdin.write('!');
+        await new Promise((r) => setTimeout(r, 30));
+        expect(lastFrame() ?? '').toContain('zzsecond!');
+        // Ctrl+P twice walks older with no typing between, Ctrl+N walks newer.
+        stdin.write('\x10');
+        await new Promise((r) => setTimeout(r, 30));
+        stdin.write('\x10');
+        await new Promise((r) => setTimeout(r, 30));
+        stdin.write('\x0e');
+        await new Promise((r) => setTimeout(r, 30));
+        stdin.write('#');
+        await new Promise((r) => setTimeout(r, 30));
+        expect(lastFrame() ?? '').toContain('zzsecond#');
     });
     it('/c shows top-6 suggestions and Tab completes', async () => {
         const { stdin, lastFrame } = render(_jsx(App, { initialModel: "m", maxSteps: 10, cwd: "/test", onPrompt: async () => { }, onSlash: async () => { } }));

package/dist/verification/baseline.js

@@ -8,6 +8,7 @@ import * as path from 'node:path';
 import * as crypto from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { primaryVerifyCommand, filteredVerifyEnv } from './registry.js';
+import { cappedOutput } from '../shared/output-cap.js';
 async function gitHead(cwd) {
     return new Promise((resolve) => {
         // S2: verify commands run with filtered env; servers needing keys must use explicit config.
@@ -83,8 +84,8 @@ function runCmd(cwd, command, timeoutMs) {
     return new Promise((resolve) => {
         // S2: verify commands run with filtered env; servers needing keys must use explicit config.
         const child = spawn(command, { cwd, shell: true, env: filteredVerifyEnv() });
-        const outChunks = [];
-        const errChunks = [];
+        const outCap = cappedOutput(MAX_BASELINE_BYTES);
+        const errCap = cappedOutput(MAX_BASELINE_BYTES);
         let done = false;
         const timer = setTimeout(() => {
             if (done)
@@ -94,22 +95,20 @@ function runCmd(cwd, command, timeoutMs) {
                 child.kill();
             }
             catch { /* ignore */ }
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_BASELINE_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_BASELINE_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             resolve({ ok: false, exitCode: -1, stdout: so, stderr: se + '\n[baseline timeout]' });
         }, timeoutMs);
-        child.stdout.on('data', (b) => { if (Buffer.concat(outChunks).length < MAX_BASELINE_BYTES)
-            outChunks.push(b); });
-        child.stderr.on('data', (b) => { if (Buffer.concat(errChunks).length < MAX_BASELINE_BYTES)
-            errChunks.push(b); });
+        child.stdout.on('data', (b) => outCap.push(b));
+        child.stderr.on('data', (b) => errCap.push(b));
         child.on('close', (code) => {
             if (done)
                 return;
             done = true;
             clearTimeout(timer);
             const exit = typeof code === 'number' ? code : -1;
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_BASELINE_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_BASELINE_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             resolve({ ok: exit === 0, exitCode: exit, stdout: so, stderr: se });
         });
         child.on('error', (err) => {
@@ -117,7 +116,7 @@ function runCmd(cwd, command, timeoutMs) {
                 return;
             done = true;
             clearTimeout(timer);
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_BASELINE_BYTES);
+            const so = outCap.text();
             resolve({ ok: false, exitCode: -1, stdout: so, stderr: String(err) });
         });
     });

package/dist/verification/classify.js

@@ -5,6 +5,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { spawn } from 'node:child_process';
 import { filteredVerifyEnv } from './registry.js';
+import { cappedOutput } from '../shared/output-cap.js';
 import { detect } from './detect.js';
 function signatureOf(failure, fallbackExit) {
     return {
@@ -91,23 +92,31 @@ export async function gatherRepairContext(cwd, failure) {
         : '';
     return { failingTests, hunks, blame };
 }
+/**
+ * `git diff -U2 | head -n 300`: the pipe bounds a well-behaved shell, this
+ * bounds one that ignores it (subshell, `;` chain, verbose stderr). Without a
+ * cap a chatty command grew the heap without limit before the 4000-char slice.
+ */
+const MAX_PIPE_BYTES = 64 * 1024;
 function execCapturePipe(cwd, cmd) {
     return new Promise((resolve) => {
         const child = spawn(cmd, { cwd, shell: true, env: filteredVerifyEnv() });
-        const chunks = [];
-        child.stdout.on('data', (b) => { chunks.push(b); });
-        child.stderr.on('data', (b) => { chunks.push(b); });
-        child.on('close', () => resolve(Buffer.concat(chunks).toString().slice(0, 4000)));
+        const sink = cappedOutput(MAX_PIPE_BYTES);
+        child.stdout.on('data', (b) => sink.push(b));
+        child.stderr.on('data', (b) => sink.push(b));
+        child.on('close', () => resolve(sink.text().slice(0, 4000)));
         child.on('error', () => resolve(''));
     });
 }
+/** `git blame` for one file — 20 output lines kept, byte-capped collection. */
+const MAX_BLAME_BYTES = 16 * 1024;
 function execCaptureArgv(cwd, file, args) {
     return new Promise((resolve) => {
         const child = spawn('git', [...args, file], { cwd, shell: false, env: filteredVerifyEnv() });
-        const chunks = [];
-        child.stdout.on('data', (b) => { chunks.push(b); });
-        child.stderr.on('data', (b) => { chunks.push(b); });
-        child.on('close', () => resolve(Buffer.concat(chunks).toString().split('\n').slice(0, 20).join('\n')));
+        const sink = cappedOutput(MAX_BLAME_BYTES);
+        child.stdout.on('data', (b) => sink.push(b));
+        child.stderr.on('data', (b) => sink.push(b));
+        child.on('close', () => resolve(sink.text().split('\n').slice(0, 20).join('\n')));
         child.on('error', () => resolve(''));
     });
 }

package/dist/verification/engine.js

@@ -11,6 +11,7 @@ import { spawn } from 'node:child_process';
 import { detect, summarize } from './detect.js';
 import { filteredVerifyEnv } from './registry.js';
 import { redact } from '../policy/secret-redactor.js';
+import { cappedOutput } from '../shared/output-cap.js';
 import { globalBus } from '../events/bus.js';
 const MAX_VERIFY_BYTES = 256 * 1024;
 function appendCapped(current, chunk) {
@@ -86,16 +87,16 @@ export async function verify(opts) {
     return new Promise((resolve) => {
         // S2: verify commands run with filtered env; servers needing keys must use explicit config.
         const child = spawn(opts.command, { cwd: opts.cwd, shell: true, env: filteredVerifyEnv() });
-        const outChunks = [];
-        const errChunks = [];
+        const outCap = cappedOutput(MAX_VERIFY_BYTES);
+        const errCap = cappedOutput(MAX_VERIFY_BYTES);
         let done = false;
         const timer = setTimeout(() => {
             if (done)
                 return;
             child.kill();
             done = true;
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_VERIFY_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_VERIFY_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             const raw = se + '\n' + so;
             emitFailed('[verify timeout]');
             resolve({
@@ -106,17 +107,15 @@ export async function verify(opts) {
                 failure: { type: 'runtime', files: [], raw, exitCode: -1 },
             });
         }, timeout);
-        child.stdout.on('data', (b) => { if (Buffer.concat(outChunks).length < MAX_VERIFY_BYTES)
-            outChunks.push(b); });
-        child.stderr.on('data', (b) => { if (Buffer.concat(errChunks).length < MAX_VERIFY_BYTES)
-            errChunks.push(b); });
+        child.stdout.on('data', (b) => outCap.push(b));
+        child.stderr.on('data', (b) => errCap.push(b));
         child.on('close', (code) => {
             if (done)
                 return;
             done = true;
             clearTimeout(timer);
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_VERIFY_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_VERIFY_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             const exit = typeof code === 'number' ? code : -1;
             if (exit === 0) {
                 emitSucceeded();

package/dist/verification/scoped.js

@@ -6,6 +6,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { spawn } from 'node:child_process';
 import { filteredVerifyEnv } from './registry.js';
+import { cappedOutput } from '../shared/output-cap.js';
 export function findRelatedTests(cwd, editedFiles) {
     if (editedFiles.length === 0)
         return [];
@@ -124,8 +125,8 @@ export async function runScopedVerify(cwd, command, timeoutMs = 45_000) {
     return new Promise((resolve) => {
         // S2: verify commands run with filtered env; servers needing keys must use explicit config.
         const child = spawn(command, { cwd, shell: true, env: filteredVerifyEnv() });
-        const outChunks = [];
-        const errChunks = [];
+        const outCap = cappedOutput(MAX_SCOPED_BYTES);
+        const errCap = cappedOutput(MAX_SCOPED_BYTES);
         let done = false;
         const timer = setTimeout(() => {
             if (done)
@@ -135,22 +136,20 @@ export async function runScopedVerify(cwd, command, timeoutMs = 45_000) {
                 child.kill();
             }
             catch { /* ignore */ }
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_SCOPED_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_SCOPED_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             resolve({ ok: false, exitCode: -1, stdout: so, stderr: se + '\n[scoped timeout]' });
         }, timeoutMs);
-        child.stdout.on('data', (b) => { if (Buffer.concat(outChunks).length < MAX_SCOPED_BYTES)
-            outChunks.push(b); });
-        child.stderr.on('data', (b) => { if (Buffer.concat(errChunks).length < MAX_SCOPED_BYTES)
-            errChunks.push(b); });
+        child.stdout.on('data', (b) => outCap.push(b));
+        child.stderr.on('data', (b) => errCap.push(b));
         child.on('close', (code) => {
             if (done)
                 return;
             done = true;
             clearTimeout(timer);
             const exit = typeof code === 'number' ? code : -1;
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_SCOPED_BYTES);
-            const se = Buffer.concat(errChunks).toString('utf-8').slice(0, MAX_SCOPED_BYTES);
+            const so = outCap.text();
+            const se = errCap.text();
             resolve({ ok: exit === 0, exitCode: exit, stdout: so, stderr: se });
         });
         child.on('error', (err) => {
@@ -158,7 +157,7 @@ export async function runScopedVerify(cwd, command, timeoutMs = 45_000) {
                 return;
             done = true;
             clearTimeout(timer);
-            const so = Buffer.concat(outChunks).toString('utf-8').slice(0, MAX_SCOPED_BYTES);
+            const so = outCap.text();
             resolve({ ok: false, exitCode: -1, stdout: so, stderr: String(err) });
         });
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "klyro",
-  "version": "1.0.13",
+  "version": "1.0.16",
   "description": "Klyro — autonomous coding harness CLI that streams from any OpenAI-compatible or Anthropic LLM endpoint.",
   "type": "module",
   "main": "dist/index.js",