fix: SSE buffer overflow protection, /model shows current model in terminal (v1.3.8)

Author: 1bcMax

dist/agent/llm.js

@@ -280,6 +280,7 @@ export class ModelClient {
         let buffer = '';
         // Persist across read() calls — event: and data: may arrive in separate chunks
         let currentEvent = '';
+        const MAX_BUFFER = 1_000_000; // 1MB buffer cap
         try {
             while (true) {
                 if (signal?.aborted)
@@ -288,6 +289,10 @@ export class ModelClient {
                 if (done)
                     break;
                 buffer += decoder.decode(value, { stream: true });
+                // Safety: if buffer grows too large without newlines, truncate
+                if (buffer.length > MAX_BUFFER) {
+                    buffer = buffer.slice(-MAX_BUFFER / 2);
+                }
                 const lines = buffer.split('\n');
                 buffer = lines.pop() || '';
                 for (const line of lines) {

dist/commands/start.js

@@ -170,6 +170,11 @@ async function runWithBasicUI(agentConfig, model, workDir) {
                 if (input.startsWith('/') && ui.handleSlashCommand(input))
                     continue;
                 // Handle model switch via /model shortcut
+                if (input === '/model' || input === '/models') {
+                    console.error(chalk.dim(`  Current model: ${agentConfig.model}`));
+                    console.error(chalk.dim('  Switch with: /model <name> (e.g. /model sonnet, /model free)'));
+                    continue;
+                }
                 if (input.startsWith('/model ')) {
                     const newModel = resolveModel(input.slice(7).trim());
                     agentConfig.model = newModel;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/runcode",
-  "version": "1.3.7",
+  "version": "1.3.8",
   "description": "RunCode — AI coding agent powered by 41+ models. Pay per use with USDC.",
   "type": "module",
   "bin": {

src/agent/llm.ts

@@ -373,6 +373,7 @@ export class ModelClient {
     // Persist across read() calls — event: and data: may arrive in separate chunks
     let currentEvent = '';
 
+    const MAX_BUFFER = 1_000_000; // 1MB buffer cap
     try {
       while (true) {
         if (signal?.aborted) break;
@@ -381,6 +382,10 @@ export class ModelClient {
         if (done) break;
 
         buffer += decoder.decode(value, { stream: true });
+        // Safety: if buffer grows too large without newlines, truncate
+        if (buffer.length > MAX_BUFFER) {
+          buffer = buffer.slice(-MAX_BUFFER / 2);
+        }
         const lines = buffer.split('\n');
         buffer = lines.pop() || '';
 

src/commands/start.ts

@@ -203,6 +203,11 @@ async function runWithBasicUI(
           // Handle slash commands in terminal UI
           if (input.startsWith('/') && ui.handleSlashCommand(input)) continue;
           // Handle model switch via /model shortcut
+          if (input === '/model' || input === '/models') {
+            console.error(chalk.dim(`  Current model: ${agentConfig.model}`));
+            console.error(chalk.dim('  Switch with: /model <name> (e.g. /model sonnet, /model free)'));
+            continue;
+          }
           if (input.startsWith('/model ')) {
             const newModel = resolveModel(input.slice(7).trim());
             agentConfig.model = newModel;