Merge release/tui-bugfixes and paint the whole retained transcript, not a smaller window

PR #338 already caps shell.streamLog at MAX_RETAINED_STREAM_ROWS (600) and
threads an absolute streamLogBase through every touch point, so the paint
tree no longer needs a second, smaller window on top of that cap — painting
every retained row is what makes all of it reachable by scrolling, and it
composes with the retention machinery instead of duplicating it.

Drop the LONG_LOG_WINDOW/collapse-marker path from shell.ts: repaintTranscriptWindow
now paints shell.streamLog directly, paintAppendStreamRow adds one node per
append and removes only what trimRetainedLog actually evicted, and
replaceStreamRowAt's cheap single-node retext no longer has a windowing
condition gating it off past 500 rows.

Author: TheGreatAxios

src/tui-opentui/long-log.ts

@@ -19,6 +19,19 @@ export const LONG_LOG_WINDOW = 200
  */
 export const LONG_LOG_COLLAPSE_THRESHOLD = 500
 
+/**
+ * Retained tail of a stream log. Display-only state — the agent's own context
+ * is kept separately — but an unbounded array still costs memory and O(n)
+ * snapshot/diff work on every append over a long, tool-heavy session. Set
+ * above the collapse threshold so eviction never fights the paint window.
+ */
+export const MAX_RETAINED_STREAM_ROWS = 600
+
+/** Rows to drop from the front of a log of this length to fit the cap. */
+export function retentionOverflow(length: number): number {
+  return Math.max(0, length - MAX_RETAINED_STREAM_ROWS)
+}
+
 export type LongLogWindow = {
   /** Inclusive start index into the full row log. */
   readonly start: number

src/tui-opentui/mention-popup.test.ts

@@ -123,6 +123,39 @@ describe("@ popup narrows as you type", () => {
     })
   })
 
+  test("quitting mid-lookup does not write into the disposed shell", async () => {
+    await withTestRenderer(
+      async (h) => {
+        const shell = createAppShell(h.renderer, {
+          terminal: { columns: 80, rows: 24 },
+          wireKeys: false,
+          run: "idle",
+        })
+        let resolveLookup: (entries: readonly string[]) => void = () => {}
+        setMentionSuggestionSource(
+          shell,
+          () =>
+            new Promise<readonly string[]>((resolve) => {
+              resolveLookup = resolve
+            }),
+        )
+
+        shell.prompt.value = "read @"
+        shell.prompt.cursorOffset = shell.prompt.value.length
+        const pending = openAtMentionSuggestions(shell)
+
+        // The operator quits before the filesystem lookup answers.
+        shell.dispose()
+        resolveLookup(["AGENTS.md", "README.md"])
+
+        await expect(pending).resolves.toBe(false)
+        expect(shell.overlayKind).toBeNull()
+        expect(isMentionPopupOpen(shell)).toBe(false)
+      },
+      { width: 80, height: 24 },
+    )
+  })
+
   test("no match closes the popup and leaves the typed text", async () => {
     await withShell(async (shell) => {
       await openAt(shell, "@")

src/tui-opentui/prompt-features.test.ts

@@ -71,6 +71,37 @@ describe("image attachments", () => {
     })
   })
 
+  test("quitting mid-read does not attach into the disposed shell", async () => {
+    await withTestRenderer(
+      async (h) => {
+        const shell = createAppShell(h.renderer, {
+          terminal: { columns: 80, rows: 24 },
+          wireKeys: true,
+          run: "idle",
+        })
+        let resolveRead: (r: { ok: true; attachment: PendingImageAttachment }) => void =
+          () => {}
+        setPromptImageSource(
+          shell,
+          () =>
+            new Promise((resolve) => {
+              resolveRead = resolve
+            }),
+        )
+
+        const pending = attachClipboardImage(shell)
+
+        // The operator quits before the clipboard read answers.
+        shell.dispose()
+        resolveRead({ ok: true, attachment: CLIP })
+
+        expect(await pending).toBe(false)
+        expect(shell.pendingAttachments).toEqual([])
+      },
+      { width: 80, height: 24 },
+    )
+  })
+
   // Raw control bytes, not a synthetic KeyEvent: a binding that never matches
   // what the terminal actually writes looks correct in the catalog and fails
   // silently in use.