jeopi-cli 16.4.5 → 16.5.0

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## [Unreleased]
 
+## [16.5.0] - 2026-08-19
+
+### Fixed
+
+- Resuming a session whose previous process died mid-turn no longer replays a non-terminal transcript to the provider. An abnormal exit recorded after an unanswered tool call (or a first-turn user message) now appends exactly one terminal aborted assistant record, so the partial history is preserved while the restored context stays valid. Applied on session load, after startup model selection (a first-turn user tail has no assistant metadata to copy from), and on `/switch`-style session reloads. Ported from oh-my-pi (upstream `e3e5bf8`, `de23690`, `a420dd1`, `bdad9ca`, `72b1ddf`, taken at their combined final state; the internal `readPendingToolCalls` wrapper was inlined into `readSessionExit` to satisfy jeopi's no-tiny-functions rule, and the recovery record's `errorMessage` names jeopi rather than OMP).
+- A malformed or temporarily unreadable `config.yml` is no longer treated as empty settings and then overwritten by the next setting change, which could erase broker tokens, model roles, and provider configuration wholesale. The save path now reads through a dedicated loader where a missing file is the only safe empty base: an invalid file is moved aside as `config.yml.broken-<ts>-<pid>` and the write is refused and re-queued, and an unreadable file aborts the write outright. Ported from oh-my-pi (upstream coding-agent 17.1.5, reduced to the data-loss fix — upstream's full YAML write-lock and multi-filename machinery was not adopted).
+- `jeopi config list` no longer prints credential settings in plain text. `auth.broker.token`, `searxng.token`, `searxng.basicPassword`, and `dev.autoqaPush.token` are now marked as credentials and render as `********` in human output; `--json` omits the value entirely and reports `redacted: true` rather than substituting a placeholder a consumer could write back. An unset or cleared credential keeps its ordinary rendering, and `config get <path>` is unchanged since it is an explicit single-value request. Ported from oh-my-pi (upstream coding-agent 17.1.4, adapted: jeopi has no legacy `ui.secret` spelling, so `isCredential` reads only the explicit marker).
+- Closed a path-traversal hole in the session blob store: `parseBlobRef` returned the reference suffix unvalidated, and `get`/`getSync`/`has` feed that value straight into `path.join(dir, hash)`, so a crafted session file containing `blob:sha256:../../…` could read files outside the blob directory. The suffix must now match a canonical 64-char lowercase hex digest. Ported from oh-my-pi (upstream coding-agent 17.1.0).
+- Browser stealth patches are actually applied again. `patchedDependencies` declared `puppeteer-core@25.1.0` while the lockfile resolved `25.4.0` through a `^25.1.0` range, so Bun silently applied nothing and all 16 stealth modifications were absent from the installed tree. The patch is rebased onto 25.4.0 and the dependency is pinned to an exact version so the two cannot drift apart again. The two hunks that no longer applied were upstream renaming `debugError` to `debugCatchError`; both stealth behaviors (main-realm binding init, and never sending the highly-detectable `Runtime.enable`) are preserved. `arktype` is pinned for the same reason — its `^2.2.0` range resolved to the patched `@ark/schema@0.56.2` only by luck.
+
 ## [16.4.3] - 2026-07-22
 
 ### Added