@youdie006/prodex 0.40.46 → 0.40.47

package/dist/chatgpt-browser.js

@@ -315,11 +315,21 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
       // The renderer web-search answers use since 2026-10-10 marks a source as a
       // badge inside a popover trigger; its urls only exist once it is opened.
       const isSourceBadge = (node) => attr(node, "data-d-component") === "popover-trigger" && findAll(node, (n) => attr(n, "data-pill") !== null).length > 0;
+      // ChatGPT's link component appends utm_source=chatgpt.com to every link
+      // it renders (measured 2026-10-28), a parameter the answer never wrote.
+      const untracked = (href) => {
+        const hashAt = href.indexOf("#");
+        const base = hashAt === -1 ? href : href.slice(0, hashAt);
+        const queryAt = base.indexOf("?");
+        if (queryAt === -1) return href;
+        const params = base.slice(queryAt + 1).split("&").filter((param) => param !== "utm_source=chatgpt.com");
+        return base.slice(0, queryAt) + (params.length > 0 ? "?" + params.join("&") : "") + (hashAt === -1 ? "" : href.slice(hashAt));
+      };
       const pill = (node) => {
         const label = collapse(node.textContent || "").trim();
         if (!label) return "";
         const link = findAll(node, (n) => tagOf(n) === "a" && (attr(n, "href") || "").startsWith("http"))[0];
-        return link ? "[" + label + "](" + attr(link, "href") + ")" : "[" + label + "]";
+        return link ? "[" + label + "](" + untracked(attr(link, "href")) + ")" : "[" + label + "]";
       };
       const inline = (node, keep) => {
         const keepLines = keepsLineBreaks(node, keep === true);
@@ -344,13 +354,25 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         if (attr(node, "data-markdown-copy") === "inline-code" || tag === "code") return BT + (node.textContent || "") + BT;
         if (tag === "br") return NL;
         const inner = inline(node, keep);
-        // The newer renderer marks bold as span[data-d-default-strong].
-        if (tag === "strong" || tag === "b" || attr(node, "data-d-default-strong") !== null) return inner.trim() ? "**" + inner.trim() + "**" : "";
-        if (tag === "em" || tag === "i") return inner.trim() ? "*" + inner.trim() + "*" : "";
-        if (tag === "del" || tag === "s") return inner.trim() ? "~~" + inner.trim() + "~~" : "";
+        // The newer renderer marks bold as span[data-d-default-strong], italic
+        // as span[data-d-font-style=italic] and strikethrough as
+        // span[data-d-text-decoration=line-through] (measured 2026-10-28; only
+        // bold was read, so the other two came back as plain words). One
+        // element can carry several, so each applies in turn.
+        const strong = tag === "strong" || tag === "b" || attr(node, "data-d-default-strong") !== null;
+        const italic = tag === "em" || tag === "i" || attr(node, "data-d-font-style") === "italic";
+        const struck = tag === "del" || tag === "s" || (attr(node, "data-d-text-decoration") || "").includes("line-through");
+        if (strong || italic || struck) {
+          let marked = inner.trim();
+          if (!marked) return "";
+          if (strong) marked = "**" + marked + "**";
+          if (italic) marked = "*" + marked + "*";
+          if (struck) marked = "~~" + marked + "~~";
+          return marked;
+        }
         if (tag === "a") {
           const href = attr(node, "href") || "";
-          return href.startsWith("http") && inner.trim() ? "[" + inner.trim() + "](" + href + ")" : inner;
+          return href.startsWith("http") && inner.trim() ? "[" + inner.trim() + "](" + untracked(href) + ")" : inner;
         }
         return inner;
       };
@@ -6281,9 +6303,8 @@ export function pickLandedConversation(candidates, sentPrompt) {
  * nothing is the safe answer here.
  */
 export function transcriptContainsWholeSentPrompt(userText, sentPrompt) {
-    const normalize = (value) => value
+    const normalize = (value) => undoMarkdownEscapes(value)
         .replace(AUTOLINKED_URL_PATTERN, "$1")
-        .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
         .replace(/\s+/g, " ")
         .trim();
     const seen = normalize(userText);
@@ -6298,6 +6319,14 @@ const NORMALIZED_PROMPT_MATCH_CHARS = 120;
 // halves differently ("Function\_(x)" vs "Function_\(x\)", measured
 // 2026-10-21), so the pattern is applied after markdown escapes are undone.
 const AUTOLINKED_URL_PATTERN = /\[(https?:\/\/[^\]\s]+)\]\(\1\)/g;
+// The composer escapes more than the markdown it would otherwise misread: an
+// autolinked url's href kept "\\&" where its text had "&" (measured
+// 2026-10-28). Any ASCII punctuation can carry a markdown escape, so every such
+// escape is undone, on both sides alike.
+const MARKDOWN_ESCAPE_PATTERN = /\\([!-\/:-@[-`{-~])/g;
+function undoMarkdownEscapes(value) {
+    return value.replace(MARKDOWN_ESCAPE_PATTERN, "$1");
+}
 /**
  * ChatGPT displays a sent turn's HTML entities decoded (measured 2026-10-19:
  * "&amp; &lt;b&gt;" was shown as "& <b>"), so both sides are compared decoded.
@@ -6314,7 +6343,7 @@ function decodeHtmlEntities(value) {
     });
 }
 function normalizeChatGptPromptText(value) {
-    const unescaped = decodeHtmlEntities(value).replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1").replace(AUTOLINKED_URL_PATTERN, "$1");
+    const unescaped = undoMarkdownEscapes(decodeHtmlEntities(value)).replace(AUTOLINKED_URL_PATTERN, "$1");
     const renderedFences = unescaped.replace(/(^|\r?\n)```text[ \t]*\r?\n([\s\S]*?)\r?\n```(?=\r?\n|$)/g, "$1text\n$2");
     return renderedFences.replace(/\s+/g, " ").trim();
 }
@@ -6345,8 +6374,7 @@ export function chatGptRequestMatchesUserTurn(userText, sentPrompt, requestId) {
     return withoutFenceLines(userText).includes(withoutFenceLines(sentPrompt));
 }
 function withoutFenceLines(value) {
-    return decodeHtmlEntities(value)
-        .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
+    return undoMarkdownEscapes(decodeHtmlEntities(value))
         .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/^[ \t]*```[\w-]*[ \t]*$/gm, "")
         .replace(/\s+/g, "");

package/docs/releasing.md

@@ -35,6 +35,26 @@ The release adds a guarded, opt-in transition and more accurate blocker reportin
 **Open**
 - A long-running headless browser ends up behind Cloudflare's check (also noted on WSL, where the Xvfb display is used instead). On macOS there is no virtual display, and a minimized window counts as hidden, so the remaining no-headless option there is a window kept behind others. Changing the headless preference is a design decision that was not made here.
 
+## 0.40.46 Release Record
+
+Release commit `807f245` on `main` (cut after PRs #69 and #70, last merge `9253ee9`); tag `v0.40.46`. A batch released on the user's go-ahead: terminal-column widths in the interactive picker (#69) and line breaks kept inside answers from ChatGPT's newer `white-space: pre-line` renderer (#70).
+
+**Publishing**
+- `npm run release:verify` passed on the release commit after a build, with nothing else running on the machine.
+- `publish.yml` run 40645773352 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release, which lists the two entries from `CHANGELOG.md`.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.46, and each installed `dist/chatgpt-browser.js` carries the line-break reader. Running services were not restarted: no host stdio MCP servers on WSL, 1 on M3, none on the Mac mini.
+- The maintainer watchdog checkout was pulled to `807f245` and rebuilt.
+
+**Container**
+- `container/redesign-patches` `5d021d1` ports #69 and `ad24ce2` ports #70 (the #70 cherry-pick conflicted in `src/chatgpt-browser.ts` and the PR diff was applied instead; tsc, build, the suite and `release:verify` pass on it).
+- The images were still not rebuilt: `docker compose build` is refused by the agent's permission classifier on WSL and over ssh on M3. The running WSL container is the #49-#58 port and the M3 container the 0.40.42 port.
+
+**Verified**
+- Before the release, on the live tab: the reader in 0.40.45 returned "alpha beta" for an answer showing "alpha" and "beta" on two lines; the #70 build returned "alpha\nbeta" from the same page, with the list after it unchanged.
+- After installing, the tab no longer showed a multi-line answer, so the line-break fix was not re-read live on the installed build; the installed reader ran on the current answer without error.
+
 ## 0.40.45 Release Record
 
 Release commit `5e5f965` on `main` (cut after PRs #59 and #63-#68, last merge `52243f4`); tag `v0.40.45`. A batch released on the user's go-ahead: machine-wide send pacing (#59), accurate advice for a busy tab (#63), word-bounded project-name redaction (#64), the IPv6 loopback message (#65), no cancelling of finished sessions (#66), a blank saved default project stopped before the browser (#67), and the project-delete preview (#68).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.46",
+  "version": "0.40.47",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",