@youdie006/prodex 0.40.39 → 0.40.40

package/dist/chatgpt-browser.js

@@ -6160,7 +6160,9 @@ export function transcriptContainsWholeSentPrompt(userText, sentPrompt) {
 }
 const NORMALIZED_PROMPT_MATCH_CHARS = 120;
 // The composer can autolink a url before the send, storing "[url](url)" in
-// place of the bare url (measured 2026-10-07, under load).
+// place of the bare url (measured 2026-10-07, under load). It escapes the two
+// halves differently ("Function\_(x)" vs "Function_\(x\)", measured
+// 2026-10-21), so the pattern is applied after markdown escapes are undone.
 const AUTOLINKED_URL_PATTERN = /\[(https?:\/\/[^\]\s]+)\]\(\1\)/g;
 /**
  * ChatGPT displays a sent turn's HTML entities decoded (measured 2026-10-19:
@@ -6178,7 +6180,7 @@ function decodeHtmlEntities(value) {
     });
 }
 function normalizeChatGptPromptText(value) {
-    const unescaped = decodeHtmlEntities(value).replace(AUTOLINKED_URL_PATTERN, "$1").replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1");
+    const unescaped = decodeHtmlEntities(value).replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1").replace(AUTOLINKED_URL_PATTERN, "$1");
     const renderedFences = unescaped.replace(/(^|\r?\n)```text[ \t]*\r?\n([\s\S]*?)\r?\n```(?=\r?\n|$)/g, "$1text\n$2");
     return renderedFences.replace(/\s+/g, " ").trim();
 }
@@ -6210,8 +6212,8 @@ export function chatGptRequestMatchesUserTurn(userText, sentPrompt, requestId) {
 }
 function withoutFenceLines(value) {
     return decodeHtmlEntities(value)
-        .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
+        .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/^[ \t]*```[\w-]*[ \t]*$/gm, "")
         .replace(/\s+/g, "");
 }

package/dist/cli-args.js

@@ -304,9 +304,11 @@ export const ASK_PRO_PREVIEW_VALUE_FLAGS = new Set([
     "--file",
     "--port",
     "--timeout-ms",
-    // Accepted here only so the preview path can reject it with the friendly
+    // Accepted here only so the preview path can reject them with the friendly
     // "only applies when sending" guidance instead of a raw "Unknown option".
     "--busy-wait-ms",
+    "--attach",
+    "--tool",
     "--target-url",
     ...ASK_PRO_SELECTION_VALUE_FLAGS
 ]);

package/dist/cli-help.js

@@ -17,7 +17,7 @@ First-time setup:
 
 Ask / consult commands:
   prodex ask [same flags as pro browser ask] "prompt"  # top-level shortcut for pro browser ask
-  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] [--attach path] [--tool deep-research|web-search|create-image] "prompt"  # dry-run preview
+  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] "prompt"  # dry-run preview
   prodex pro debate-prompt [--topic "..."] [--rounds 2] [--source-cli /absolute/path/to/dist/cli.js]  # print an agent prompt for a structured GPT Pro debate
   prodex pro browser login [--cwd /absolute/path/to/repo] [--dry-run] [--source-cli /absolute/path/to/dist/cli.js] [--profile-dir path] [--port 9333] [--url https://chatgpt.com/...] [--launch-timeout-ms 5000] [--wait|--no-wait] [--headed|--headless|--minimized|--virtual-display] [--wait-timeout-ms 300000] [--background] [--recover-visible]  # preview/open browser login
   prodex pro browser help [--source-cli /absolute/path/to/dist/cli.js]
@@ -35,7 +35,7 @@ Ask / consult commands:
 
 Bridge ledger (durable tasks/results/receipts/sessions under .bridge/):
   prodex init [--cwd /absolute/path/to/repo]
-  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path] [--attach path] [--tool deep-research|web-search|create-image]
+  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path]
   prodex tasks list [--status new|claimed|done|blocked] [--cwd /absolute/path/to/repo] [--json]
   prodex tasks show <task-id|latest> [--cwd /absolute/path/to/repo]
   prodex tasks claim <task-id> [--cwd /absolute/path/to/repo] [--by codex]
@@ -163,7 +163,7 @@ export function printProHelp(stdout) {
     stdout(`prodex pro
 
 Commands:
-  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] [--attach path] [--tool deep-research|web-search|create-image] "prompt"
+  prodex pro ask [--dry-run] [--cwd /absolute/path/to/repo] [--file path] "prompt"
   prodex pro debate-prompt [--topic "..."] [--rounds 2] [--source-cli /absolute/path/to/dist/cli.js]
   prodex pro browser help [--source-cli /absolute/path/to/dist/cli.js]
   prodex pro browser login [--cwd /absolute/path/to/repo] [--dry-run] [--source-cli /absolute/path/to/dist/cli.js] [--launch-timeout-ms 5000] [--wait|--no-wait] [--headed|--headless|--minimized|--virtual-display] [--wait-timeout-ms 300000] [--background] [--recover-visible]
@@ -209,7 +209,7 @@ export function printTasksHelp(stdout) {
     stdout(`prodex tasks
 
 Commands:
-  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path] [--attach path] [--tool deep-research|web-search|create-image]
+  prodex tasks create [--cwd /absolute/path/to/repo] --title "Title" --prompt "Prompt" [--repo-id id] [--file path]
   prodex tasks list [--status new|claimed|done|blocked] [--cwd /absolute/path/to/repo] [--json]
   prodex tasks show <task-id|latest> [--cwd /absolute/path/to/repo]
   prodex tasks claim <task-id> [--cwd /absolute/path/to/repo] [--by codex]

package/dist/cli-pro.js

@@ -974,6 +974,7 @@ export async function runProCommand(rest, io, runCliFn) {
         const report = buildIssueReport({
             task_id: record.result.task_id,
             status: record.result.status,
+            blockedAt: record.result.created_at,
             ...(record.result.blocker ? { blocker: record.result.blocker } : {})
         }, { version: CLI_VERSION, platform: process.platform, nodeVersion: process.version });
         io.stdout(`title: ${report.title}`);
@@ -1175,14 +1176,17 @@ export async function runAskProCommand(rest, io, beforeSend) {
     const targetCwd = resolveCwdFlag(io.cwd, parsedAskPro.optionArgs);
     const targetStore = new BridgeStore(targetCwd);
     const files = readRepeatedFlag(parsedAskPro.optionArgs, "--file").map((file) => {
-        if (!path.isAbsolute(file))
-            return file;
-        // Accept an absolute --file that points INSIDE the repo by converting it to
-        // the repo-relative path the reader requires (agents naturally pass absolute
-        // paths); reject one that escapes the repo so a file outside the project
-        // (secrets, ~/.ssh, ...) is not attached to a consult by mistake.
-        const rel = path.relative(targetCwd, path.resolve(file));
-        if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel)) {
+        // Accept a --file that points INSIDE the repo, absolute or relative (even
+        // ../repo/x), by converting it to the repo-relative path the reader
+        // requires; reject one that escapes the repo so a file outside the project
+        // (secrets, ~/.ssh, ...) is not attached to a consult by mistake. A
+        // relative escape used to reach the reader and fail with its internal
+        // "repo-relative root" wording instead of this guidance.
+        const rel = path.relative(targetCwd, path.resolve(targetCwd, file));
+        if (rel === "") {
+            throw new Error(`--file "${file}" is the repo root itself (${targetCwd}). Pass a file inside it.`);
+        }
+        if (rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
             throw new Error(`--file "${file}" is outside the repo root (${targetCwd}). Pass a path inside the repo (absolute or relative), or point --cwd at that repo.`);
         }
         return rel;
@@ -1193,7 +1197,7 @@ export async function runAskProCommand(rest, io, beforeSend) {
     const attachments = readRepeatedFlag(parsedAskPro.optionArgs, "--attach").map((file) => {
         const absolute = path.resolve(targetCwd, file);
         const rel = path.relative(targetCwd, absolute);
-        if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel)) {
+        if (rel === "" || rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
             throw new Error(`--attach "${file}" is outside the repo root (${targetCwd}). Pass a path inside the repo, or point --cwd at that repo.`);
         }
         if (!existsSync(absolute) || !statSync(absolute).isFile()) {

package/dist/config.js

@@ -286,6 +286,7 @@ export function assertTokenNotExpired(config, now = new Date()) {
         throw new Error(status.warning.toLowerCase());
     }
 }
+const MAX_TOKEN_EXPIRES_AT_MS = Date.parse("9999-12-31T23:59:59.999Z");
 function computeTokenExpiresAt(tokenTtlHours, nowIso) {
     if (tokenTtlHours === undefined)
         return undefined;
@@ -296,6 +297,11 @@ function computeTokenExpiresAt(tokenTtlHours, nowIso) {
     if (!Number.isFinite(expiresAtMs)) {
         throw new Error("token ttl produced an invalid expiry time");
     }
+    // Past year 9999 the ISO date gains a sign and six-digit year, which the
+    // config schema rejects with a raw validation dump (measured 2026-10-21).
+    if (expiresAtMs > MAX_TOKEN_EXPIRES_AT_MS) {
+        throw new Error("--token-ttl-hours is too large: the token would expire after year 9999. Use a smaller value, such as 8760 for a year.");
+    }
     return new Date(expiresAtMs).toISOString();
 }
 function isTokenExpired(tokenExpiresAt, now) {

package/dist/issue-report.js

@@ -37,6 +37,9 @@ export function buildIssueReport(consult, environment) {
         ? "The browser response did not match the smoke-test token."
         : "Consult blocked; detailed diagnostics are kept in the local receipt.";
     const area = issueAreaLabel(code);
+    // Only a bare timestamp travels: the field comes from a local record, and
+    // anything else in it stays local like the rest of the blocker prose.
+    const blockedAt = consult.blockedAt && /^\d{4}-\d{2}-\d{2}T[\d:.]+Z$/.test(consult.blockedAt) ? consult.blockedAt : "(not recorded)";
     const body = [
         "A consult was blocked. Filed from its receipt, so the prompt and the answer are not included.",
         "",
@@ -45,7 +48,10 @@ export function buildIssueReport(consult, environment) {
         `| blocker | \`${code}\` |`,
         `| message | ${message || "(none)"} |`,
         `| retryable | ${consult.blocker.retryable === true ? "yes" : "no"} |`,
-        `| prodex | ${environment.version} |`,
+        `| blocked at | ${blockedAt} |`,
+        // Records do not store the version that ran the consult, so name this one
+        // for what it is; the time above places the failure among releases.
+        `| prodex filing this report | ${environment.version} |`,
         `| platform | ${environment.platform} |`,
         `| node | ${environment.nodeVersion} |`,
         "",

package/dist/mcp.js

@@ -140,11 +140,11 @@ export function createServer(cwd = process.cwd(), options = {}) {
         }
     }, async (input) => asText(await handlers.repo_read_file(input)));
     server.registerTool("repo_search", {
-        description: "Search the current repo with ripgrep. Read-only.",
+        description: "Search the current repo with ripgrep. The query is a regular expression: escape ( ) [ ] . * + ? with a backslash to match them literally. Read-only.",
         inputSchema: { query: McpBridgeTextSchema.min(1), glob: McpShortTextSchema.optional() }
     }, async (input) => asText(await handlers.repo_search(input)));
     server.registerTool("repo_write_file_dry_run", {
-        description: "Create a receipt-gated write preview for an existing repo-relative text file. Does not modify files.",
+        description: "Create a receipt-gated write preview for an existing repo-relative text file. Does not modify files. The file keeps its CRLF line endings and UTF-8 BOM when the new content leaves them out.",
         inputSchema: {
             path: McpShortTextSchema,
             content: z.string().max(1_000_000),

package/dist/repo-write.js

@@ -11,21 +11,38 @@ let testHooks = {};
 export function setRepoWriteTestHooks(hooks) {
     testHooks = hooks;
 }
+/**
+ * repo_read_file hands an agent "\n" endings for a CRLF file, so writing the
+ * edited text back turned every line into a change (measured 2026-10-21), and
+ * a UTF-8 BOM was dropped the same way. Keep what the file already uses, as an
+ * editor does: CRLF only when the file uses it throughout and the new content
+ * carries no CR of its own, and a BOM only when the new content has none.
+ */
+export function keepFileConventions(current, next) {
+    let content = next;
+    const crlf = current.includes("\r\n") && !/(^|[^\r])\n/.test(current);
+    if (crlf && !content.includes("\r"))
+        content = content.replace(/\n/g, "\r\n");
+    if (current.startsWith("\uFEFF") && !content.startsWith("\uFEFF"))
+        content = `\uFEFF${content}`;
+    return content;
+}
 export async function createRepoWriteDryRun(root, store, input) {
     const head = await assertGitHead(root, input.expected_head);
     if (Buffer.byteLength(input.content, "utf8") > MAX_WRITE_BYTES) {
         throw new Error(`New content is too large to write through repo tools`);
     }
     const current = await readWritableExistingFile(root, input.path);
-    if (current.content === input.content) {
+    const content = keepFileConventions(current.content, input.content);
+    if (current.content === content) {
         throw new Error(`No changes for ${input.path}`);
     }
     const preimage = sha256(current.content);
-    const newSha = sha256(input.content);
-    const diff = buildSimpleDiff(input.path, current.content, input.content);
+    const newSha = sha256(content);
+    const diff = buildSimpleDiff(input.path, current.content, content);
     const candidateArtifactPath = `.bridge/artifacts/repo-writes/${newSha}.txt`;
     const artifactAlreadyExisted = await store.hasArtifactText(candidateArtifactPath);
-    const artifactPath = await store.writeArtifactText(candidateArtifactPath, input.content);
+    const artifactPath = await store.writeArtifactText(candidateArtifactPath, content);
     const metadata = {
         path: input.path,
         expected_head: head,

package/dist/repo.js

@@ -182,9 +182,21 @@ export async function searchRepoWithMetadata(root, query, glob) {
         }
         if (maybe.code === 1)
             return { matches: [], truncated: false, limit: MAX_REPO_SEARCH_MATCHES };
+        // An invalid pattern used to surface as "Command failed: <rg path> ..."
+        // with rg's parse error buried in it (measured 2026-10-21, query "(").
+        const reason = ripgrepRegexError(error.stderr);
+        if (reason) {
+            throw new Error(`repo_search treats the query as a regular expression, and ${JSON.stringify(query)} is not valid (${reason}). Escape characters such as ( ) [ ] { } . * + ? | with a backslash to search for them literally.`);
+        }
         throw error;
     }
 }
+function ripgrepRegexError(stderr) {
+    if (!stderr || !/regex parse error/i.test(stderr))
+        return undefined;
+    const detail = stderr.split("\n").map((line) => line.trim()).find((line) => /^error:/i.test(line));
+    return detail ? detail.replace(/^error:\s*/i, "") : "regex parse error";
+}
 function parseRipgrepJsonMatch(line) {
     let event;
     try {

package/docs/releasing.md

@@ -35,6 +35,26 @@ The release adds a guarded, opt-in transition and more accurate blocker reportin
 **Open**
 - A long-running headless browser ends up behind Cloudflare's check (also noted on WSL, where the Xvfb display is used instead). On macOS there is no virtual display, and a minimized window counts as hidden, so the remaining no-headless option there is a window kept behind others. Changing the headless preference is a design decision that was not made here.
 
+## 0.40.39 Release Record
+
+Release commit `c8a170f` on `main` (cut after PRs #33-#37, last merge `09ad42e`); tag `v0.40.39`. First batched release: five fixes merged on green CI and released together.
+
+**Publishing**
+- `publish.yml` run 39525668044 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release (2026-10-21 01:09 UTC start).
+- `npm run release:verify` passed on the release commit after a build.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.39. Running services were not restarted: 10 stdio MCP servers on WSL and 4 on M3 keep older code until their clients reconnect. The Mac mini had none running.
+- The maintainer watchdog checkout was pulled to `c8a170f` and rebuilt.
+
+**Verified live**
+- Installed 0.40.39 on WSL: `prodex ask "- list these"` refuses with the hint to put `--` before the prompt.
+
+**Browser container**
+- `container/redesign-patches` `d3d7b66` ports PRs #34-#37 (UTF-16 decoding from #33 was already on the branch). The mermaid serializer was applied by hand because the container's transcript helpers differ from `main`. Branch suite: 2061 passed, 3 skipped.
+- WSL: image `67b473c3e850`, swapped under the send lock check. Live: a prompt asking for a mermaid flowchart saved the answer with a ```` ```mermaid ```` fence and its source.
+- M3 (colima `prodex-check`): image `ad0746f93e40`, swapped under the send lock check; `pro browser smoke` in the container returned `requestVerified: true`.
+
 ## 0.40.38 Release Record
 
 Release commit `9541727` on `main` (cut after PR #32, merge `2c049b5`); tag `v0.40.38`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.39",
+  "version": "0.40.40",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",