zames_pro 2.72.8 → 2.73.0

package/dist/browser.js

@@ -2,9 +2,9 @@ import { chromium, } from 'playwright';
 import { extractAnswer, extractTokenUsage, dumpNetBody, isFinishedWithoutAnswer, } from './net-capture.js';
 import { rewriteFailedAttachments } from './commands.js';
 import { parseHistoryMessages, extractChatMessages, scrapeChatList, scrapeChatMessages, } from './browser-chats.js';
-import { CHAT_URL, CHAT_ID_RE, chatUrl, HISTORY_MESSAGES_URL, BUTTON_CLASS_RE, INPUT_SELECTORS, SEND_SELECTORS, STOP_SELECTORS, STOP_NAME_RE, CONTINUE_NAME_RE, ANSWER_SELECTORS, THINK_CLASS_RE, MESSAGE_CONTAINER_SELECTORS, RESTORE_ANSWER_SELECTORS, ASSISTANT_CLASS_RE, ASSISTANT_SELECTOR, ANSWER_MARKDOWN_SELECTOR, MARKDOWN_SELECTOR, CHAT_SIGNAL_NODES_SELECTOR, NEW_CHAT_SELECTOR, NEW_CHAT_TEXT_RE, PASSWORD_SELECTORS, LOGIN_SELECTORS, LOGIN_SUBMIT_SELECTORS, LOGIN_BUTTON_SELECTOR, LOGIN_NAME_RE, LOGIN_FORM_SUBMIT_RE, SIDEBAR_TOGGLE_SELECTORS, TOGGLE_SELECTORS, DEEP_THINKING_RE, WEB_SEARCH_RE, ATTACH_SELECTORS, ANSWER_URL_RE, } from './deepseek-ui.js';
+import { CHAT_URL, CHAT_ID_RE, chatUrl, HISTORY_MESSAGES_URL, BUTTON_CLASS_RE, INPUT_SELECTORS, SEND_SELECTORS, STOP_SELECTORS, STOP_NAME_RE, CONTINUE_NAME_RE, ANSWER_SELECTORS, THINK_CLASS_RE, MESSAGE_CONTAINER_SELECTORS, RESTORE_ANSWER_SELECTORS, ASSISTANT_CLASS_RE, ASSISTANT_SELECTOR, ANSWER_MARKDOWN_SELECTOR, MARKDOWN_SELECTOR, CHAT_SIGNAL_NODES_SELECTOR, NEW_CHAT_SELECTOR, NEW_CHAT_TEXT_RE, PASSWORD_SELECTORS, LOGIN_SELECTORS, LOGIN_SUBMIT_SELECTORS, MFA_CODE_SELECTORS, MFA_SUBMIT_SELECTORS, MFA_SEND_CODE_SELECTORS, MFA_SEND_CODE_RE, LOGIN_BUTTON_SELECTOR, LOGIN_NAME_RE, LOGIN_FORM_SUBMIT_RE, SIDEBAR_TOGGLE_SELECTORS, TOGGLE_SELECTORS, DEEP_THINKING_RE, WEB_SEARCH_RE, ATTACH_SELECTORS, ANSWER_URL_RE, } from './deepseek-ui.js';
 import { probeUiHealth, } from './ui-health.js';
-import { readPageToastsInDom, readLoginErrorInDom, readLastAnswerInDom, chatSignalInDom, continueVisibleCheapInDom, stopButtonVisibleInDom, clickStopInDom, continueVisibleInDom, clickContinueInDom, readUserAgentInDom, findLoginInputIndexInDom, submitLoginFormInDom, setBusyTitleInDom, pasteTextIntoElement, readElementText, elementTagNameInDom, isElementEnabledInDom, readInputTrimmedTextInDom, dumpDomCountsInDom, } from './browser-dom.js';
+import { readPageToastsInDom, readLoginErrorInDom, readMfaAccountInDom, readLastAnswerInDom, chatSignalInDom, continueVisibleCheapInDom, stopButtonVisibleInDom, clickStopInDom, continueVisibleInDom, clickContinueInDom, readUserAgentInDom, findLoginInputIndexInDom, submitLoginFormInDom, setBusyTitleInDom, pasteTextIntoElement, readElementText, elementTagNameInDom, isElementEnabledInDom, readInputTrimmedTextInDom, dumpDomCountsInDom, } from './browser-dom.js';
 import path from 'path';
 import os from 'os';
 import fs from 'fs/promises';
@@ -22,6 +22,7 @@ export { STOP_NAME_RE, CONTINUE_NAME_RE };
 import { askPassword, USER_DATA_DIR, parseHeadlessUACache, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, headlessUACacheReady, sanitizeHeadlessUA, AUTH_MARKER_FILE, isGenerationIncompleteText, isRateLimitText, isServerBusyText, normText, cleanAnswer, RateLimitError, ServerBusyError, GenerationIncompleteError, cleanSingletonFiles, profileLooksLocked, nukeProfile, } from './browser-pure.js';
 export { askPassword, parseHeadlessUACache, headlessUACacheReady, sanitizeHeadlessUA, isGenerationIncompleteText, isRateLimitText, isServerBusyText, normText, RateLimitError, ServerBusyError, GenerationIncompleteError, };
 export class DeepSeekBrowser {
+    providerName = 'deepseek';
     headless;
     debug;
     channel;
@@ -214,7 +215,10 @@ export class DeepSeekBrowser {
     }
     /** Translation bound to this browser's locale. */
     _t(key, params) {
-        return translate(this.locale)(key, params);
+        // Default the {provider} placeholder to DeepSeek for the shared `ds.*`
+        // messages (QwenBrowser overrides it with 'Qwen'), so a provider-agnostic
+        // string never lies about which backend is talking.
+        return translate(this.locale)(key, { provider: 'DeepSeek', ...params });
     }
     /**
      * Switch the language of the messages the browser itself prints (login
@@ -554,10 +558,17 @@ export class DeepSeekBrowser {
         const filled = await this._fillLoginForm(this.auth.username, this.auth.password);
         if (!filled)
             return false;
-        const ok = await this._waitLoggedIn(20_000);
-        if (ok)
+        const ok = await this._waitLoggedInOrMfa(20_000);
+        if (ok) {
             await this._persistSessionIfNeeded();
-        return ok;
+            return true;
+        }
+        // Password accepted but DeepSeek now wants an email one-time code: ask the
+        // operator for it instead of failing the whole auto-login.
+        if (process.stdin.isTTY && (await this._mfaVisible())) {
+            return await this._handleMfaIfPresent();
+        }
+        return false;
     }
     /**
      * Ask the operator for login/password in the terminal (only in a TTY) and
@@ -602,7 +613,7 @@ export class DeepSeekBrowser {
             console.log(theme.warn(this._t('auth.form_not_found')));
             return false;
         }
-        const ok = await this._waitLoggedIn(20_000);
+        const ok = await this._waitLoggedInOrMfa(20_000);
         if (ok) {
             // Remember the credentials so the next launch can re-login silently.
             this.auth.username = user;
@@ -610,10 +621,23 @@ export class DeepSeekBrowser {
             await this._persistSessionIfNeeded();
             this.onAuthSave?.(user, password);
             console.log(theme.assistant(this._t('auth.auto_login_ok')));
+            return true;
         }
-        else {
-            // Detect a credentials error shown by DeepSeek, otherwise report a
-            // generic failure with the page hint so the operator can react.
+        // Password accepted, but DeepSeek wants an email one-time code. Ask the
+        // operator for it and submit the dialog.
+        if (await this._mfaVisible()) {
+            // The credentials are valid — remember them even before MFA completes,
+            // so the next launch can skip straight to the code dialog.
+            this.auth.username = user;
+            this.auth.password = password;
+            this.onAuthSave?.(user, password);
+            const mfaOk = await this._handleMfaIfPresent();
+            if (mfaOk)
+                return true;
+        }
+        // Detect a credentials error shown by DeepSeek, otherwise report a
+        // generic failure with the page hint so the operator can react.
+        {
             const reason = await this._readLoginError();
             if (reason) {
                 console.log(theme.error(this._t('auth.login_rejected', { v: reason })));
@@ -622,7 +646,7 @@ export class DeepSeekBrowser {
                 console.log(theme.warn(this._t('auth.auto_login_failed', { v: this._t('auth.no_reason') })));
             }
         }
-        return ok;
+        return false;
     }
     /**
      * Read a visible login/credentials error message from the page, if any.
@@ -677,7 +701,11 @@ export class DeepSeekBrowser {
         // After each attempt we give the login a short window and stop as soon as
         // it succeeds, so a stray click does not fire on an already-logged-in page.
         const tryLogin = async () => {
-            if (await this._waitLoggedIn(3000))
+            if (await this._waitLoggedInOrMfa(3000))
+                return true;
+            // An MFA dialog also means the password step was ACCEPTED — stop
+            // submitting, the caller will ask the operator for the one-time code.
+            if (await this._mfaVisible())
                 return true;
             return false;
         };
@@ -734,6 +762,121 @@ export class DeepSeekBrowser {
         }
         return false;
     }
+    /**
+     * Like `_waitLoggedIn`, but the input field ALSO appears right after the
+     * password step even when DeepSeek demands an MFA one-time code — the code
+     * dialog only BLOCKS the first message. A plain `_waitLoggedIn` would then
+     * report success, swallow the real login failure (the next send would hit the
+     * dialog and hang), and never ask the operator for the code. Detect the MFA
+     * input first and treat it as "not logged in yet".
+     */
+    async _waitLoggedInOrMfa(timeoutMs) {
+        const deadline = Date.now() + timeoutMs;
+        while (Date.now() < deadline) {
+            if (await this._mfaVisible())
+                return false;
+            if (await this.isLoggedIn().catch(() => false))
+                return true;
+            await this.page.waitForTimeout(500);
+        }
+        return false;
+    }
+    /** Is the email one-time-code (MFA) dialog currently shown? */
+    async _mfaVisible() {
+        return await this._findVisible(MFA_CODE_SELECTORS, 300)
+            .then((l) => !!l)
+            .catch(() => false);
+    }
+    /**
+     * Handle DeepSeek's email MFA dialog ("Verify your account"). It appears
+     * after a correct password when the account has two-step verification on. The
+     * code is sent by email; we ask the operator for it in the terminal and type
+     * it into the dialog. Returns true when the session became active, false when
+     * there is no dialog or the operator could not complete it.
+     */
+    async _handleMfaIfPresent() {
+        const codeInput = await this._findVisible(MFA_CODE_SELECTORS, 1000);
+        if (!codeInput)
+            return false;
+        const account = await this.page
+            .evaluate(readMfaAccountInDom)
+            .catch(() => '');
+        // The dialog opens with an EMPTY field: the email is only sent after
+        // "Send code" is clicked. Press it first (only when it is not already
+        // counting down), then ask the operator for the code that just arrived.
+        const clicked = await this._clickMfaSendCode();
+        console.log('\n' +
+            theme.warn(this._t(clicked ? 'auth.mfa_code_sent' : 'auth.mfa_required', {
+                v: account || '—',
+            })));
+        const readline = await import('readline');
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+            terminal: true,
+        });
+        const code = (await new Promise((resolve) => rl.question(this._t('auth.mfa_prompt'), (a) => resolve(a))))
+            .trim()
+            .replace(/\s+/g, '');
+        rl.close();
+        if (!code)
+            return false;
+        await this._setInputText(codeInput, code);
+        await this.page.waitForTimeout(150);
+        // Submit the code. Prefer the dialog's own submit button; fall back to
+        // Enter in the code field (the form submits on Enter).
+        let submitted = false;
+        for (const sel of MFA_SUBMIT_SELECTORS) {
+            const btn = this.page.locator(sel).last();
+            try {
+                if ((await btn.count()) === 0)
+                    continue;
+                if (!(await btn.isVisible().catch(() => false)))
+                    continue;
+                await btn.click({ timeout: 2000 });
+                submitted = true;
+                break;
+            }
+            catch { }
+        }
+        if (!submitted)
+            await codeInput.press('Enter').catch(() => { });
+        const ok = await this._waitLoggedIn(20_000);
+        if (ok) {
+            await this._persistSessionIfNeeded();
+            console.log(theme.assistant(this._t('auth.auto_login_ok')));
+        }
+        else {
+            const reason = await this._readLoginError();
+            console.log(theme.warn(this._t('auth.mfa_failed', {
+                v: reason || this._t('auth.no_reason'),
+            })));
+        }
+        return ok;
+    }
+    /**
+     * Click the dialog's "Send code" button. Returns false when it is absent or
+     * already counting down (a resend cooldown), so we never hammer the endpoint.
+     */
+    async _clickMfaSendCode() {
+        for (const sel of MFA_SEND_CODE_SELECTORS) {
+            const btn = this.page.locator(sel).last();
+            try {
+                if ((await btn.count()) === 0)
+                    continue;
+                if (!(await btn.isVisible().catch(() => false)))
+                    continue;
+                const label = ((await btn.innerText().catch(() => '')) || '').trim();
+                // Only click a REAL request button, never the countdown that replaces it.
+                if (label && !MFA_SEND_CODE_RE.test(label))
+                    continue;
+                await btn.click({ timeout: 2000 });
+                return true;
+            }
+            catch { }
+        }
+        return false;
+    }
     /**
      * Persist the authenticated session. The persistent profile already keeps
      * cookies on disk; `saveSession` (config) is kept as an explicit toggle for

package/dist/commands.js

@@ -1,3 +1,4 @@
+import { providerLabel } from './providers.js';
 import path from 'path';
 import { isImageName } from './attachments.js';
 import { translate } from './i18n.js';
@@ -276,6 +277,10 @@ export function renderDoctor(d, t = translate('en')) {
     row(true, 'node', d.nodeVersion);
     row(true, 'platform', d.platform);
     row(true, 'workdir', d.workdir);
+    if (d.provider) {
+        const label = providerLabel(d.provider).toLowerCase();
+        row(true, 'provider', label + (d.providerModel ? ' (' + d.providerModel + ')' : ''));
+    }
     row(d.gitOk, 'git', d.gitOk
         ? t('doctor.repo', { v: d.gitBranch || t('doctor.detached') })
         : t('doctor.not_repo'));
@@ -1013,6 +1018,8 @@ export const SLASH_COMMANDS = [
     { name: '/queue', key: 'help.cmd.queue' },
     { name: '/tasks', key: 'help.cmd.tasks' },
     { name: '/config', key: 'help.cmd.config' },
+    { name: '/provider', key: 'help.cmd.provider' },
+    { name: '/model', key: 'help.cmd.model' },
     { name: '/skills', key: 'help.cmd.skills' },
     { name: '/memory', key: 'help.cmd.memory' },
     { name: '/remember', key: 'help.cmd.remember' },

package/dist/config-command.js

@@ -0,0 +1,118 @@
+// The /config subcommand DISPATCH (BACKLOG C3). The PURE text rendering lives
+// in config-commands.ts; this module owns the parsing/routing of the text
+// subcommands (list/get/set/reset/lang/path) and prints through injected
+// callbacks. Everything that touches live state (the runtime config object,
+// the browser toggles, the LineEditor, the interactive menu) is injected, so
+// the dispatch itself is unit-tested without a live agent.
+//
+// The interactive menu (`/config` bare or `menu`) is delegated to openMenu()
+// because it pauses the editor and reads keys itself.
+import { theme } from './theme.js';
+import { configGetValue, configValueHint } from './config-commands.js';
+/**
+ * Handle a `/config <sub>` text command. Never throws for a bad subcommand or
+ * argument: it prints a message and returns, so the caller can `await` it
+ * blindly from the main loop and from the live mid-run interception.
+ */
+export async function handleConfigCommand(input, deps) {
+    const { t, print, printErr, getValue, setValue, resetField, showList, openMenu, currentLocale, normalizeLocale, localeDisplayName, homeConfigPath, projectConfigPath, } = deps;
+    const schema = deps.schema;
+    const parts = input.trim().split(/\s+/);
+    const sub = (parts[1] || '').toLowerCase();
+    // With no subcommand - the menu (or a text list in non-TTY).
+    if (!sub || sub === 'menu' || sub === 'ui') {
+        await openMenu();
+        return;
+    }
+    if (sub === 'list' || sub === 'show' || sub === 'ls') {
+        showList();
+        return;
+    }
+    if (sub === 'path' || sub === 'paths') {
+        print(theme.system(t('cfg.paths', { global: homeConfigPath, project: projectConfigPath })));
+        return;
+    }
+    // /config lang <ru|en> - quick access to ui.locale
+    if (sub === 'lang' || sub === 'language' || sub === 'язык') {
+        const val = parts[2];
+        if (!val) {
+            print(theme.system(t('status.locale', { v: localeDisplayName(currentLocale()) })));
+            print(theme.dim(t('cfg.lang_usage')));
+            return;
+        }
+        const field = schema.find((f) => f.path === 'ui.locale');
+        if (!field)
+            return;
+        const loc = normalizeLocale(val);
+        try {
+            setValue(field, loc);
+        }
+        catch (e) {
+            printErr(theme.error(t('cfg.write_error', { v: e.message })));
+            return;
+        }
+        print(theme.assistant(t('cfg.lang_set', { v: localeDisplayName(loc) })));
+        return;
+    }
+    if (sub === 'get') {
+        const key = parts[2];
+        if (!key) {
+            print(theme.dim(t('cfg.usage')));
+            return;
+        }
+        const field = schema.find((f) => f.path === key);
+        if (!field) {
+            printErr(theme.error(t('cfg.unknown_key', { v: key })));
+            return;
+        }
+        const cur = getValue(key);
+        print(theme.system(t('cfg.value', { v: key, value: configGetValue(key, cur, t) })));
+        return;
+    }
+    if (sub === 'set') {
+        const key = parts[2];
+        const raw = parts.slice(3).join(' ');
+        const field = schema.find((f) => f.path === key);
+        if (!field) {
+            printErr(theme.error(t('cfg.unknown_key', { v: key || '' })));
+            return;
+        }
+        if (!raw) {
+            print(theme.dim(t('cfg.usage')));
+            return;
+        }
+        try {
+            setValue(field, raw);
+        }
+        catch {
+            printErr(theme.error(t('cfg.bad_value', { v: key, type: configValueHint(field, t) })));
+            return;
+        }
+        print(theme.assistant(t('cfg.saved', {
+            v: key,
+            value: JSON.stringify(getValue(key)),
+            file: homeConfigPath,
+        })));
+        return;
+    }
+    if (sub === 'reset' || sub === 'unset') {
+        const key = parts[2];
+        const field = schema.find((f) => f.path === key);
+        if (!field) {
+            printErr(theme.error(t('cfg.unknown_key', { v: key || '' })));
+            return;
+        }
+        try {
+            resetField(field);
+        }
+        catch (e) {
+            printErr(theme.error(t('cfg.write_error', { v: e.message })));
+            return;
+        }
+        print(theme.assistant(t('cfg.reset', { v: key })));
+        return;
+    }
+    // Unknown subcommand - show the list.
+    printErr(theme.error(t('cfg.unknown_key', { v: sub })));
+    showList();
+}

package/dist/config.js

@@ -4,6 +4,7 @@ import os from 'os';
 import { DEFAULT_DIAGNOSTICS } from './diagnostics.js';
 import { DEFAULT_LOCALE } from './i18n.js';
 import { writeJsonAtomic } from './fsutil.js';
+import { PROVIDER_IDS } from './providers.js';
 const ZAMES_HOME = path.join(os.homedir(), '.zames');
 const HOME_CONFIG = path.join(ZAMES_HOME, 'config.json');
 // The PROJECT config path is resolved LAZILY: `/cd` changes process.cwd() at
@@ -14,8 +15,23 @@ export function projectConfigPath() {
 }
 export const DEFAULTS = {
     maxIterations: 0,
+    // Default backend stays DeepSeek so existing users see no change; the
+    // operator switches with /provider qwen (persisted to the home config).
+    provider: 'deepseek',
+    qwen: {
+        model: '',
+        enabled: false,
+        // Qwen tolerates back-to-back sends (verified live: 4 sends at 0 ms gap,
+        // no rate limit), so the DeepSeek 15 s throttle is pure latency here.
+        minSendIntervalMs: 1000,
+        // The first send after a cold load can take minutes ("Model loading…" +
+        // thinking); a GUEST turn measured up to ~9 min live on a cold profile, so
+        // give it generous room. A signed-in session answers in seconds; this only
+        // bounds the worst case.
+        answerTimeoutMs: 900000,
+    },
     // Headless by default: the browser runs without a visible window. Set
-    // headless: false (or pass --headed) to watch/debug the DeepSeek page.
+    // headless: false (or pass --headed) to watch/debug the page.
     headless: true,
     debug: false,
     browserChannel: null,
@@ -91,6 +107,16 @@ export function loadConfig() {
     }
     return merged;
 }
+// The agent-loop watchdog deadline per provider. The loop default (240s) is
+// tuned for DeepSeek; a Qwen GUEST turn regularly takes 7-8 minutes (cold
+// "Model loading…" + a long thinking phase) and would trip the watchdog on
+// every send. Derive the deadline from the provider's own answer timeout so
+// there is headroom. DeepSeek keeps browser.askDeadlineMs (the loop default).
+export function providerAskDeadlineMs(cfg) {
+    if (cfg.provider === 'qwen')
+        return cfg.qwen.answerTimeoutMs + 120_000;
+    return cfg.browser.askDeadlineMs;
+}
 function deepMerge(target, source) {
     for (const key of Object.keys(source)) {
         if (source[key] &&
@@ -152,6 +178,35 @@ export const CONFIG_SCHEMA = [
         labelKey: 'cfg.f.browser_authSaveSession',
         groupKey: 'cfg.group.browser',
     },
+    {
+        path: 'provider',
+        type: 'enum',
+        values: [...PROVIDER_IDS],
+        labelKey: 'cfg.f.provider',
+        groupKey: 'cfg.group.browser',
+    },
+    {
+        path: 'qwen.model',
+        type: 'string',
+        labelKey: 'cfg.f.qwen_model',
+        groupKey: 'cfg.group.browser',
+    },
+    {
+        path: 'qwen.minSendIntervalMs',
+        type: 'number',
+        min: 0,
+        max: 600000,
+        labelKey: 'cfg.f.qwen_minSendIntervalMs',
+        groupKey: 'cfg.group.browser',
+    },
+    {
+        path: 'qwen.answerTimeoutMs',
+        type: 'number',
+        min: 1000,
+        max: 3600000,
+        labelKey: 'cfg.f.qwen_answerTimeoutMs',
+        groupKey: 'cfg.group.browser',
+    },
     {
         path: 'debug',
         type: 'boolean',

package/dist/context.js

@@ -58,25 +58,45 @@ const BUILTIN_SKILLS = [
             '4. Do NOT change code. Answer in the operator language.',
     },
 ];
-const MAX_FILE_BASE = 60000;
-const MAX_TOTAL = 240000;
+// Per-file budgets. AGENTS.md/MEMORY.md are hand-maintained and grow over
+// time, so the caps are generous: an AGENTS.md of a real project (this repo's
+// own file is ~69k) must NOT be silently cut. The old 60k cap already
+// truncated it. Set higher and split per kind so a huge AGENTS.md can no
+// longer starve MEMORY.md of the shared pool (the old single pool filled on
+// agents first, so memory was dropped WHOLE when agents were large).
+export const MAX_FILE_BASE = 120000;
+/** MEMORY.md is append-only, so it gets its own (larger) budget. */
+export const MAX_MEMORY_FILE = 200000;
+/** Total spent on the AGENTS.md chain (project instructions + scoped). */
+const MAX_AGENTS_TOTAL = 240000;
+/** Total spent on the MEMORY.md chain, independent of the agents pool. */
+const MAX_MEMORY_TOTAL = 200000;
 const CRLF_RE = /\r\n/g;
 const NL = String.fromCharCode(10);
-function clipIf(name, content, budget) {
+function clipIf(name, content, budget, fromTail = false) {
     const cleaned = content.replace(CRLF_RE, NL).trim();
     if (cleaned.length <= budget)
         return cleaned;
     const keep = Math.max(0, budget - 120);
-    return (cleaned.slice(0, keep) +
-        NL +
-        NL +
-        '[... ' +
+    const marker = '[... ' +
         name +
         ' truncated (' +
         (cleaned.length - keep) +
-        ' chars omitted) ...]');
+        ' chars omitted) ...]';
+    // MEMORY.md is APPENDED to over time, so its newest (most relevant) notes
+    // live at the TAIL — a head clip would drop exactly those. Keep the tail
+    // for memory files, the head for AGENTS.md (whose top is the summary).
+    if (!fromTail)
+        return cleaned.slice(0, keep) + NL + NL + marker;
+    let slice = cleaned.slice(cleaned.length - keep);
+    // Cut at a NOTE boundary, not mid-note: start the kept tail at the next line
+    // that begins a bullet or a heading, so a half-sentence note is not left.
+    const m = slice.search(/\n(?=[-*] |#{1,6} )/);
+    if (m > 0)
+        slice = slice.slice(m + 1);
+    return marker + NL + NL + slice;
 }
-async function readIfFile(p, budget) {
+async function readIfFile(p, budget, fromTail = false) {
     try {
         const st = await fs.stat(p);
         if (!st.isFile())
@@ -85,7 +105,7 @@ async function readIfFile(p, budget) {
         // An EXISTING but empty file is still present: keep it so the prompt
         // shows an (empty) AGENTS.md/MEMORY.md section instead of silently
         // dropping the file. Only a read failure returns null.
-        const content = clipIf(path.basename(p), raw, budget);
+        const content = clipIf(path.basename(p), raw, budget, fromTail);
         return { path: p, content };
     }
     catch {
@@ -367,7 +387,8 @@ async function loadMemoryChain(workdir) {
         path.join(os.homedir(), '.zames', 'MEMORY.md'),
         path.join(os.homedir(), '.claude', 'MEMORY.md'),
     ]) {
-        const f = await readIfFile(p, MAX_FILE_BASE);
+        // Memory is append-only, so clip from the TAIL to keep the newest notes.
+        const f = await readIfFile(p, MAX_MEMORY_FILE, true);
         if (f && !seen.has(f.path)) {
             seen.add(f.path);
             out.push(f);
@@ -378,7 +399,7 @@ async function loadMemoryChain(workdir) {
         const p = await findNamedFile(dir, MEMORY_NAMES);
         if (!p || seen.has(p))
             continue;
-        const f = await readIfFile(p, MAX_FILE_BASE);
+        const f = await readIfFile(p, MAX_MEMORY_FILE, true);
         if (f) {
             seen.add(p);
             out.push(f);
@@ -394,24 +415,31 @@ export async function loadProjectContext(workdir, touchPaths = []) {
         loadCommands(workdir).catch(() => []),
     ]);
     const scopedAgents = await loadScopedAgents(workdir, touchPaths).catch(() => []);
-    let used = 0;
-    const withinBudget = (files) => {
+    // SEPARATE pools for agents and memory: the old single pool filled on the
+    // agents chain first, so a large AGENTS.md dropped MEMORY.md WHOLE. Each
+    // category now has its own budget, and memory can never be starved by
+    // project instructions (or vice versa).
+    const takeWithin = (files, total) => {
+        let used = 0;
         const kept = [];
         for (const f of files) {
-            if (used + f.content.length > MAX_TOTAL)
+            if (used + f.content.length > total)
                 break;
             used += f.content.length;
             kept.push(f);
         }
         return kept;
     };
+    const keptAgents = takeWithin(agents, MAX_AGENTS_TOTAL);
+    const agentsUsed = keptAgents.reduce((n, f) => n + f.content.length, 0);
+    const keptScoped = takeWithin(scopedAgents, MAX_AGENTS_TOTAL - agentsUsed);
     return {
-        agents: withinBudget(agents),
-        // Scoped files are dropped silently when the total budget is already spent
+        agents: keptAgents,
+        // Scoped files are dropped silently when the AGENTS pool is already spent
         // on the main chain: a nested AGENTS.md is an optimization, not a hard
         // requirement, and must never push out a top-level instruction.
-        scopedAgents: withinBudget(scopedAgents),
-        memory: withinBudget(memory),
+        scopedAgents: keptScoped,
+        memory: takeWithin(memory, MAX_MEMORY_TOTAL),
         skills,
         commands,
     };

package/dist/deepseek-ui.js

@@ -164,6 +164,39 @@ export const LOGIN_SUBMIT_SELECTORS = [
     'div[role="button"]:has-text("Sign in")',
     'div[role="button"]:has-text("Войти")',
 ];
+// ---------- MFA / email verification ----------
+//
+// After a correct password DeepSeek may demand a one-time code sent to the
+// account email (the `.ds-mfa-verification-modal` dialog). The code input is
+// the reliable anchor: `autocomplete=one-time-code` is a semantic attribute
+// that survives class renames, so detection does not depend on DeepSeek's CSS.
+// The submit button is matched both by its own class and by its label, since
+// the modal is a newer component whose classes we cannot pin down.
+export const MFA_CODE_SELECTORS = [
+    'input[autocomplete="one-time-code"]',
+    '.ds-mfa-verification-modal input[type="tel"]',
+    'input[inputmode="numeric"][maxlength="6"]',
+];
+export const MFA_MODAL_SELECTOR = '.ds-mfa-verification-modal, [role="dialog"]';
+export const MFA_SUBMIT_SELECTORS = [
+    'div[role="button"].ds-mfa-verification-submit',
+    '.ds-mfa-verification-modal div[role="button"].ds-button--primary',
+    'div[role="button"]:has-text("Verify and log in")',
+    'div[role="button"]:has-text("Verify")',
+    'div[role="button"]:has-text("Подтвердить")',
+    'div[role="button"]:has-text("Войти")',
+];
+// The email is NOT sent until the operator clicks "Send code" — the dialog only
+// shows an empty field and a request button. The button lives inside the code
+// field suffix and turns into a countdown ("Resend in 60s") once clicked, so we
+// match it by its TEXT and skip it when it is already counting down.
+export const MFA_SEND_CODE_RE = /^(send code|resend|отправить\s*код|отправить\s*повторно|выслать\s*код)\s*$/i;
+export const MFA_SEND_CODE_SELECTORS = [
+    '.ds-verify-code-input-countdown',
+    '.ds-mfa-verification-modal div[role="button"]',
+    'div[role="button"]:has-text("Send code")',
+    'div[role="button"]:has-text("Отправить код")',
+];
 // ---------- sidebar / chats ----------
 export const SIDEBAR_TOGGLE_SELECTORS = [
     'button[aria-label*="sidebar" i]',

package/dist/i18n/common.js

@@ -29,10 +29,6 @@ export const commonMessages = {
         ru: 'System prompt на след. задаче: {v}',
         en: 'System prompt next task: {v}',
     },
-    'status.resend': {
-        ru: 'Resend prompt (--resend-prompt): {v}',
-        en: 'Resend prompt (--resend-prompt): {v}',
-    },
     'status.last_chat': { ru: 'Last chat: {v}', en: 'Last chat: {v}' },
     'status.sessions': { ru: 'Сессии: {v}', en: 'Sessions: {v}' },
     'status.dev': {
@@ -145,14 +141,6 @@ export const commonMessages = {
         ru: 'Транскрипт: {transcript} · чат: {chat}',
         en: 'Transcript: {transcript} · chat: {chat}',
     },
-    'msg.abort_gen': {
-        ru: '⏹ Esc — прерываю генерацию...',
-        en: '⏹ Esc — aborting generation...',
-    },
-    'msg.abort_ctrlc': {
-        ru: '⏹ Ctrl+C — прерываю генерацию...',
-        en: '⏹ Ctrl+C — aborting generation...',
-    },
     'msg.queued': { ru: '📨 В очередь ({n}): ', en: '📨 Queued ({n}): ' },
     // TTY variant: the editor already echoed the message text, so only the
     // count is shown (no repeated text).
@@ -301,10 +289,6 @@ export const commonMessages = {
         en: 'undo is disabled in the config',
     },
     'rewind.empty': { ru: 'Чекпойнтов нет.', en: 'No checkpoints.' },
-    'rewind.created': {
-        ru: '📸 Чекпойнт: {v}',
-        en: '📸 Checkpoint: {v}',
-    },
     'rewind.list_title': { ru: 'Чекпойнты:', en: 'Checkpoints:' },
     'rewind.reverted': {
         ru: '↶ Откатили рабочее дерево к чекпойнту {v}',