@youdie006/prodex 0.40.46 → 0.40.48

package/dist/chatgpt-browser.js

@@ -315,11 +315,32 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
       // The renderer web-search answers use since 2026-10-10 marks a source as a
       // badge inside a popover trigger; its urls only exist once it is opened.
       const isSourceBadge = (node) => attr(node, "data-d-component") === "popover-trigger" && findAll(node, (n) => attr(n, "data-pill") !== null).length > 0;
+      // ChatGPT's link component appends utm_source=chatgpt.com to every link
+      // it renders (measured 2026-10-28), a parameter the answer never wrote.
+      const untracked = (href) => {
+        const hashAt = href.indexOf("#");
+        const base = hashAt === -1 ? href : href.slice(0, hashAt);
+        const queryAt = base.indexOf("?");
+        if (queryAt === -1) return href;
+        const params = base.slice(queryAt + 1).split("&").filter((param) => param !== "utm_source=chatgpt.com");
+        return base.slice(0, queryAt) + (params.length > 0 ? "?" + params.join("&") : "") + (hashAt === -1 ? "" : href.slice(hashAt));
+      };
       const pill = (node) => {
         const label = collapse(node.textContent || "").trim();
         if (!label) return "";
         const link = findAll(node, (n) => tagOf(n) === "a" && (attr(n, "href") || "").startsWith("http"))[0];
-        return link ? "[" + label + "](" + attr(link, "href") + ")" : "[" + label + "]";
+        return link ? "[" + label + "](" + untracked(attr(link, "href")) + ")" : "[" + label + "]";
+      };
+      // Inline code goes in a backtick run longer than any inside it, padded
+      // with a space when it starts or ends with a backtick, or has a space at
+      // both ends that markdown would strip. One backtick each side turned the
+      // code a\`b into a one-letter span and a stray backtick (measured
+      // 2026-10-29).
+      const inlineCode = (value) => {
+        const longestRun = (value.match(new RegExp(BT + "+", "g")) || []).reduce((most, run) => Math.max(most, run.length), 0);
+        const ticks = BT.repeat(longestRun + 1);
+        const pad = value.startsWith(BT) || value.endsWith(BT) || (value.startsWith(" ") && value.endsWith(" ") && value.trim() !== "") ? " " : "";
+        return ticks + pad + value + pad + ticks;
       };
       const inline = (node, keep) => {
         const keepLines = keepsLineBreaks(node, keep === true);
@@ -341,16 +362,28 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         if (isCheckbox(node)) return (attr(node, "aria-checked") === "true" || attr(node, "checked") !== null ? "[x]" : "[ ]") + " ";
         if (isMath(node)) return isDisplayMath(node) ? "$$" + mathSource(node) + "$$" : "$" + mathSource(node) + "$";
         if (attr(node, "data-chatgpt-copy-reference") !== null || isSourceBadge(node)) return pill(node);
-        if (attr(node, "data-markdown-copy") === "inline-code" || tag === "code") return BT + (node.textContent || "") + BT;
+        if (attr(node, "data-markdown-copy") === "inline-code" || tag === "code") return inlineCode(node.textContent || "");
         if (tag === "br") return NL;
         const inner = inline(node, keep);
-        // The newer renderer marks bold as span[data-d-default-strong].
-        if (tag === "strong" || tag === "b" || attr(node, "data-d-default-strong") !== null) return inner.trim() ? "**" + inner.trim() + "**" : "";
-        if (tag === "em" || tag === "i") return inner.trim() ? "*" + inner.trim() + "*" : "";
-        if (tag === "del" || tag === "s") return inner.trim() ? "~~" + inner.trim() + "~~" : "";
+        // The newer renderer marks bold as span[data-d-default-strong], italic
+        // as span[data-d-font-style=italic] and strikethrough as
+        // span[data-d-text-decoration=line-through] (measured 2026-10-28; only
+        // bold was read, so the other two came back as plain words). One
+        // element can carry several, so each applies in turn.
+        const strong = tag === "strong" || tag === "b" || attr(node, "data-d-default-strong") !== null;
+        const italic = tag === "em" || tag === "i" || attr(node, "data-d-font-style") === "italic";
+        const struck = tag === "del" || tag === "s" || (attr(node, "data-d-text-decoration") || "").includes("line-through");
+        if (strong || italic || struck) {
+          let marked = inner.trim();
+          if (!marked) return "";
+          if (strong) marked = "**" + marked + "**";
+          if (italic) marked = "*" + marked + "*";
+          if (struck) marked = "~~" + marked + "~~";
+          return marked;
+        }
         if (tag === "a") {
           const href = attr(node, "href") || "";
-          return href.startsWith("http") && inner.trim() ? "[" + inner.trim() + "](" + href + ")" : inner;
+          return href.startsWith("http") && inner.trim() ? "[" + inner.trim() + "](" + untracked(href) + ")" : inner;
         }
         return inner;
       };
@@ -384,16 +417,23 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
       };
       const table = (node) => {
         const cell = (value) => collapse(value).trim().split("|").join(String.fromCharCode(92) + "|");
-        const rows = findAll(node, (n) => tagOf(n) === "tr").map((row) => children(row).filter((c) => c.nodeType === 1).map((c) => cell(inline(c))));
+        const cellNodes = findAll(node, (n) => tagOf(n) === "tr").map((row) => children(row).filter((c) => c.nodeType === 1));
+        const rows = cellNodes.map((cells) => cells.map((c) => cell(inline(c))));
         if (rows.length === 0) return "";
+        // The newer renderer marks a column written :---, :---: or ---: with
+        // data-d-align start, center or end on its cells, and a plain column
+        // with none (measured 2026-10-29); every column came back as ---.
+        const rule = (c) => {
+          const align = attr(c, "data-d-align");
+          return align === "start" ? ":---" : align === "center" ? ":---:" : align === "end" ? "---:" : "---";
+        };
         const line = (cells) => "| " + cells.join(" | ") + " |";
-        return [line(rows[0]), line(rows[0].map(() => "---")), ...rows.slice(1).map(line)].join(NL);
+        return [line(rows[0]), line(cellNodes[0].map(rule)), ...rows.slice(1).map(line)].join(NL);
       };
-      const list = (node, depth, keep) => {
+      const list = (node, keep) => {
         const ordered = tagOf(node) === "ol";
         let number = parseInt(attr(node, "start") || "1", 10);
         if (!Number.isFinite(number)) number = 1;
-        const indent = "   ".repeat(depth);
         const items = [];
         for (const item of children(node)) {
           if (item.nodeType !== 1 || tagOf(item) !== "li") continue;
@@ -405,16 +445,25 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
           const keepItemLines = keepsLineBreaks(item, keep === true);
           for (const child of children(item)) {
             const tag = child.nodeType === 1 ? tagOf(child) : "";
-            if (tag === "ul" || tag === "ol") { nested.push(list(child, depth + 1, keepItemLines)); continue; }
-            if (isBlock(child)) { if (buffer.trim()) words.push(buffer.trim()); buffer = ""; const b = block(child, depth + 1, keepItemLines); if (b) words.push(b); continue; }
+            if (tag === "ul" || tag === "ol") { nested.push(list(child, keepItemLines)); continue; }
+            if (isBlock(child)) { if (buffer.trim()) words.push(buffer.trim()); buffer = ""; const b = block(child, keepItemLines); if (b) words.push(b); continue; }
             buffer += inlineNode(child, keepItemLines);
           }
           if (buffer.trim()) words.push(buffer.trim());
-          items.push(indent + marker + " " + words.join(" ") + (nested.length ? NL + nested.join(NL) : ""));
+          // A block spanning lines (a code block, a table) is a paragraph of its own.
+          const body = words.reduce((text, word) => (!text ? word : text + (text.includes(NL) || word.includes(NL) ? NL + NL : " ") + word), "");
+          // An item's later lines sit at its content column, after the marker
+          // and its space. They came back at column 0, or three spaces in for a
+          // nested list, so a code block, table, quote or second paragraph
+          // ended the item and a list under item 10 was not nested (measured
+          // 2026-10-29). Nested content is laid out from column 0 and shifted.
+          const pad = " ".repeat(marker.length + 1);
+          const lines = (body + (nested.length ? NL + nested.join(NL) : "")).split(NL);
+          items.push(marker + " " + lines.map((line, at) => (at === 0 || !line ? line : pad + line)).join(NL));
         }
         return items.join(NL);
       };
-      const block = (node, depth, keep) => {
+      const block = (node, keep) => {
         if (node.nodeType === 3) return (keep === true ? collapseKeepingLines(node.textContent || "") : collapse(node.textContent || "")).trim();
         if (node.nodeType !== 1 || skipped(node)) return "";
         const tag = tagOf(node);
@@ -423,25 +472,27 @@ export const CHATGPT_RENDERED_MESSAGE_TEXT_JS = `
         if (isMermaidPreview(node)) return mermaidBlock(node);
         if (tag === "table") return table(node);
         if (/^h[1-6]$/.test(tag)) return "#".repeat(Number(tag[1])) + " " + inline(node).trim();
-        if (tag === "ul" || tag === "ol") return list(node, depth, keepsLineBreaks(node, keep === true));
-        if (tag === "hr") return "---";
-        if (tag === "blockquote") return blocks(node, depth, keep).split(NL).map((line) => "> " + line).join(NL);
+        if (tag === "ul" || tag === "ol") return list(node, keepsLineBreaks(node, keep === true));
+        // The newer renderer draws a rule as an empty
+        // div[data-d-component=divider] (measured 2026-10-29).
+        if (tag === "hr" || attr(node, "data-d-component") === "divider") return "---";
+        if (tag === "blockquote") return blocks(node, keep).split(NL).map((line) => "> " + line).join(NL);
         if (tag === "p") return inline(node, keep).trim();
-        return blocks(node, depth, keep);
+        return blocks(node, keep);
       };
-      const blocks = (node, depth, keep) => {
+      const blocks = (node, keep) => {
         const keepLines = keepsLineBreaks(node, keep === true);
         const parts = [];
         let buffer = "";
         const flush = () => { if (buffer.trim()) parts.push(buffer.trim()); buffer = ""; };
         for (const child of children(node)) {
-          if (isBlock(child)) { flush(); const b = block(child, depth, keepLines); if (b) parts.push(b); continue; }
+          if (isBlock(child)) { flush(); const b = block(child, keepLines); if (b) parts.push(b); continue; }
           buffer += inlineNode(child, keepLines);
         }
         flush();
         return parts.join(NL + NL);
       };
-      const markdown = blocks(root, 0).trim();
+      const markdown = blocks(root).trim();
       return markdown || root.innerText || "";
     };
     // A sent user turn renders inline code as <code>, dropping its backticks
@@ -2164,6 +2215,13 @@ export function menuOpenExpression() {
 export function menuClosedExpression() {
     return `!document.querySelector('[data-testid="composer-intelligence-picker-content"],[role="menu"]:has([role="slider"])')`;
 }
+/** One visible model selector, marked closed, with no picker on the page. */
+export function modelSelectorReadsClosedExpression() {
+    return `(() => {
+    const triggers = [...document.querySelectorAll('button[aria-label="Select ChatGPT model"][aria-haspopup="menu"],[data-codex-intelligence-trigger="true"][aria-haspopup="menu"]')].filter((el) => el.getClientRects().length > 0);
+    return triggers.length === 1 && triggers[0].getAttribute("aria-expanded") === "false" && !${menuOpenExpression()};
+  })()`;
+}
 function toLabelCandidates(label) {
     return typeof label === "string" ? [label] : [...label];
 }
@@ -2236,6 +2294,28 @@ async function verifiedClickAt(cdp, x, y, label) {
     await cdp.send("Input.dispatchMouseEvent", { type: "mousePressed", x, y, button: "left", clickCount: 1 });
     await cdp.send("Input.dispatchMouseEvent", { type: "mouseReleased", x, y, button: "left", clickCount: 1 });
 }
+const MODEL_MENU_FIRST_PRESS_MS = 1_500;
+/**
+ * Waits for the model picker after the selector was pressed, pressing it once
+ * more if the page ignored that press.
+ *
+ * Measured 2026-10-29 with the host under load: in two of every four sends
+ * that started from a conversation, a trusted pointerdown and pointerup reached
+ * the selector while it read closed and nothing happened - aria-expanded stayed
+ * false and no menu was added - so the send failed as "model menu did not
+ * open". A selector that still reads closed is pressed again; one that reads
+ * open is left alone, since a press would shut it.
+ */
+export async function waitForModelMenu(cdp) {
+    if (await waitForExpressionTrue(cdp, menuOpenExpression(), MODEL_MENU_FIRST_PRESS_MS))
+        return true;
+    if (await cdp.evaluate(modelSelectorReadsClosedExpression())) {
+        const again = await cdp.evaluate(modelButtonRectExpression());
+        if (again.ok && again.x !== undefined && again.y !== undefined)
+            await verifiedClickAt(cdp, again.x, again.y, "model selector");
+    }
+    return waitForExpressionTrue(cdp, menuOpenExpression(), MENU_OPEN_TIMEOUT_MS);
+}
 /**
  * Whether the model picker BUTTON already advertises the requested model, so
  * the menu never has to be opened. ChatGPT moved the models behind a "Model"
@@ -3349,7 +3429,7 @@ async function selectModelReasoning(cdp, options, selectionWarnings = []) {
                     button = fresh;
             }
         }
-        const opened = await waitForExpressionTrue(cdp, menuOpenExpression(), MENU_OPEN_TIMEOUT_MS);
+        const opened = await waitForModelMenu(cdp);
         if (!opened)
             throw new Error("ChatGPT model menu did not open after clicking the selector");
         // Current ChatGPT: one power slider (Instant/Medium/High/Extra High/Pro on
@@ -5116,7 +5196,7 @@ export async function listChatGptModelOptions(input = {}) {
         }
         try {
             await verifiedClickAt(cdp, button.x, button.y, "model selector");
-            const opened = await waitForExpressionTrue(cdp, menuOpenExpression(), MENU_OPEN_TIMEOUT_MS);
+            const opened = await waitForModelMenu(cdp);
             if (!opened)
                 throw new Error("ChatGPT model menu did not open after clicking the selector");
             const options = await cdp.evaluate(modelMenuOptionsExpression());
@@ -6281,9 +6361,8 @@ export function pickLandedConversation(candidates, sentPrompt) {
  * nothing is the safe answer here.
  */
 export function transcriptContainsWholeSentPrompt(userText, sentPrompt) {
-    const normalize = (value) => value
+    const normalize = (value) => undoMarkdownEscapes(value)
         .replace(AUTOLINKED_URL_PATTERN, "$1")
-        .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
         .replace(/\s+/g, " ")
         .trim();
     const seen = normalize(userText);
@@ -6298,6 +6377,14 @@ const NORMALIZED_PROMPT_MATCH_CHARS = 120;
 // halves differently ("Function\_(x)" vs "Function_\(x\)", measured
 // 2026-10-21), so the pattern is applied after markdown escapes are undone.
 const AUTOLINKED_URL_PATTERN = /\[(https?:\/\/[^\]\s]+)\]\(\1\)/g;
+// The composer escapes more than the markdown it would otherwise misread: an
+// autolinked url's href kept "\\&" where its text had "&" (measured
+// 2026-10-28). Any ASCII punctuation can carry a markdown escape, so every such
+// escape is undone, on both sides alike.
+const MARKDOWN_ESCAPE_PATTERN = /\\([!-\/:-@[-`{-~])/g;
+function undoMarkdownEscapes(value) {
+    return value.replace(MARKDOWN_ESCAPE_PATTERN, "$1");
+}
 /**
  * ChatGPT displays a sent turn's HTML entities decoded (measured 2026-10-19:
  * "&amp; &lt;b&gt;" was shown as "& <b>"), so both sides are compared decoded.
@@ -6314,7 +6401,7 @@ function decodeHtmlEntities(value) {
     });
 }
 function normalizeChatGptPromptText(value) {
-    const unescaped = decodeHtmlEntities(value).replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1").replace(AUTOLINKED_URL_PATTERN, "$1");
+    const unescaped = undoMarkdownEscapes(decodeHtmlEntities(value)).replace(AUTOLINKED_URL_PATTERN, "$1");
     const renderedFences = unescaped.replace(/(^|\r?\n)```text[ \t]*\r?\n([\s\S]*?)\r?\n```(?=\r?\n|$)/g, "$1text\n$2");
     return renderedFences.replace(/\s+/g, " ").trim();
 }
@@ -6345,8 +6432,7 @@ export function chatGptRequestMatchesUserTurn(userText, sentPrompt, requestId) {
     return withoutFenceLines(userText).includes(withoutFenceLines(sentPrompt));
 }
 function withoutFenceLines(value) {
-    return decodeHtmlEntities(value)
-        .replace(/\\([\\`*_{}[\]()#+\-.!>~|])/g, "$1")
+    return undoMarkdownEscapes(decodeHtmlEntities(value))
         .replace(AUTOLINKED_URL_PATTERN, "$1")
         .replace(/^[ \t]*```[\w-]*[ \t]*$/gm, "")
         .replace(/\s+/g, "");

package/docs/releasing.md

@@ -35,6 +35,47 @@ The release adds a guarded, opt-in transition and more accurate blocker reportin
 **Open**
 - A long-running headless browser ends up behind Cloudflare's check (also noted on WSL, where the Xvfb display is used instead). On macOS there is no virtual display, and a minimized window counts as hidden, so the remaining no-headless option there is a window kept behind others. Changing the headless preference is a design decision that was not made here.
 
+## 0.40.47 Release Record
+
+Release commit `609b1c9` on `main` (cut after PRs #71-#73, last merge `40d7eee`); tag `v0.40.47`. Released promptly because of #72: on 0.40.46 any prompt carrying a url with "&" (a query string, bare or in a markdown link) was answered and then refused as `request_mismatch`, so the answer was not returned. #71 (italic and strikethrough in the newer renderer) and #73 (the `utm_source=chatgpt.com` parameter ChatGPT appends to rendered links) went out with it.
+
+**Publishing**
+- `npm run release:verify` passed on the release commit after a build, with nothing else running on the machine.
+- `publish.yml` run 40656237042 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release, which lists the three entries from `CHANGELOG.md`.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.47. Running services were not restarted: no host stdio MCP servers on WSL, 1 on M3, none on the Mac mini.
+- The maintainer watchdog checkout was pulled to `609b1c9` and rebuilt.
+
+**Container**
+- `container/redesign-patches` `63b060c` ports #71, `62376fa` #72 and `facbd9d` #73 (#71 and #73 did not cherry-pick cleanly and their hunks were applied by exact replacement; tsc, build, the full suite, 2128 tests, and `release:verify` pass on `facbd9d`).
+- WSL, on the user's request after the release: the image was built from `facbd9d` (`c03be48c060d`) and the container swapped while its send lock was idle. The old container had been `unhealthy` (its health check's fetch failed) and its last consult, from another session at 03:41 UTC, was blocked as `browser_unreachable`; that consult was left for its owner to recover. The new container came up healthy, `pro browser check` reported logged in with a composer, and an Instant smoke whose prompt linked `https://example.com/s?q=a&page=2` returned `PRODEX_PRO_SMOKE_OK`, status done. Its `prodex --version` still prints 0.40.18 because the branch never bumps its version.
+- M3, on 2026-10-29: the build over ssh was refused by the agent's permission classifier, so the user ran the build-and-swap script. The image was built from `facbd9d` in the M3 container checkout (`cfaf881d2fd6`, replacing the 0.40.42 port `59747258b693`) and the container swapped while its send lock was idle. It came up healthy, `pro browser check` reported logged in with a composer, and the same Instant smoke (prompt linking `https://example.com/s?q=a&page=2`) returned `PRODEX_PRO_SMOKE_OK`, status done.
+
+**Verified live on installed 0.40.47 (WSL, scratch repo, Instant)**
+- A send whose prompt linked `https://example.com/s?q=a&page=2` returned status done. The user turn was stored with `\&` in the autolink's href half, the shape 0.40.46 refused.
+- Its answer came back as "The ~~old~~ *new* [search](https://example.com/s?q=a&page=2) page." while the page's anchor href was `https://example.com/s?q=a&page=2&utm_source=chatgpt.com`.
+
+## 0.40.46 Release Record
+
+Release commit `807f245` on `main` (cut after PRs #69 and #70, last merge `9253ee9`); tag `v0.40.46`. A batch released on the user's go-ahead: terminal-column widths in the interactive picker (#69) and line breaks kept inside answers from ChatGPT's newer `white-space: pre-line` renderer (#70).
+
+**Publishing**
+- `npm run release:verify` passed on the release commit after a build, with nothing else running on the machine.
+- `publish.yml` run 40645773352 passed all six platforms, then npm publish with SLSA v1 provenance and the GitHub Release, which lists the two entries from `CHANGELOG.md`.
+
+**Installed**
+- WSL, M3, Mac mini: `prodex --version` reports 0.40.46, and each installed `dist/chatgpt-browser.js` carries the line-break reader. Running services were not restarted: no host stdio MCP servers on WSL, 1 on M3, none on the Mac mini.
+- The maintainer watchdog checkout was pulled to `807f245` and rebuilt.
+
+**Container**
+- `container/redesign-patches` `5d021d1` ports #69 and `ad24ce2` ports #70 (the #70 cherry-pick conflicted in `src/chatgpt-browser.ts` and the PR diff was applied instead; tsc, build, the suite and `release:verify` pass on it).
+- The images were still not rebuilt: `docker compose build` is refused by the agent's permission classifier on WSL and over ssh on M3. The running WSL container is the #49-#58 port and the M3 container the 0.40.42 port.
+
+**Verified**
+- Before the release, on the live tab: the reader in 0.40.45 returned "alpha beta" for an answer showing "alpha" and "beta" on two lines; the #70 build returned "alpha\nbeta" from the same page, with the list after it unchanged.
+- After installing, the tab no longer showed a multi-line answer, so the line-break fix was not re-read live on the installed build; the installed reader ran on the current answer without error.
+
 ## 0.40.45 Release Record
 
 Release commit `5e5f965` on `main` (cut after PRs #59 and #63-#68, last merge `52243f4`); tag `v0.40.45`. A batch released on the user's go-ahead: machine-wide send pacing (#59), accurate advice for a busy tab (#63), word-bounded project-name redaction (#64), the IPv6 loopback message (#65), no cancelling of finished sessions (#66), a blank saved default project stopped before the browser (#67), and the project-delete preview (#68).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@youdie006/prodex",
-  "version": "0.40.46",
+  "version": "0.40.48",
   "description": "Local receipt bus for coordinating Codex execution with ChatGPT Pro/Projects consultation.",
   "author": "youdie006",
   "license": "MIT",