zames_pro 2.81.0 → 2.81.2

package/CHANGELOG.md

@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.81.2] - 2026-10-21
+
+### Fixed
+
+- **tools:** read-only mode drops concatenated/camelCase MCP writers
+
+## [2.81.1] - 2026-10-21
+
+### Added
+
+- send telemetry is opt-in (on automatically in dev)
+
+### Fixed
+
+- **config:** mask a password in the /config set confirmation
+
+### Changed
+
+- apply prettier to the GLM provider and send runtime
+
 ## [2.81.0] - 2026-10-21
 
 ### Added

package/dist/browser-login.js

@@ -113,7 +113,9 @@ async function runHeadedLogin(deps) {
         // may still hold the session cookies, so verify once more and accept.
         if (deps.windowClosed()) {
             deps.notice('login.window_closed');
-            const again = await deps.probeLogin().catch(() => 'unknown');
+            const again = await deps
+                .probeLogin()
+                .catch(() => 'unknown');
             return again === 'in';
         }
         await deps.sleep(1000);

package/dist/config-command.js

@@ -90,7 +90,11 @@ export async function handleConfigCommand(input, deps) {
         }
         print(theme.assistant(t('cfg.saved', {
             v: key,
-            value: JSON.stringify(getValue(key)),
+            // Mask a SECRET here too: this line goes to the terminal scrollback,
+            // the transcript and screenshots. `configGetValue` already masks the
+            // password for /config get and the list, but the save confirmation
+            // echoed it in the clear.
+            value: configGetValue(key, getValue(key), t),
             file: homeConfigPath,
         })));
         return;

package/dist/config.js

@@ -115,7 +115,11 @@ export const DEFAULTS = {
         maxSubagents: 3,
         deepThinking: false,
         webSearch: true,
-        sendTelemetry: true,
+        // OFF by default: the telemetry file only serves diagnosis and manual
+        // calibration of the send pauses (the adaptive throttle needs the EVENTS,
+        // not the file, and keeps working). A regular user gains nothing from it,
+        // so it is opted into with `/config set browser.sendTelemetry true`.
+        sendTelemetry: false,
         auth: {
             username: '',
             password: '',

package/dist/glm-browser.js

@@ -292,9 +292,7 @@ export class GlmBrowser {
         // re-apply them BEFORE the first goto, or the SPA answers 401 and may wipe
         // its own token.
         if (this._carryCookies && this._carryCookies.length) {
-            await this.context
-                .addCookies(this._carryCookies)
-                .catch(() => { });
+            await this.context.addCookies(this._carryCookies).catch(() => { });
         }
         this.page = this.context.pages()[0] || (await this.context.newPage());
         this._windowClosed = false;
@@ -366,9 +364,7 @@ export class GlmBrowser {
             throw new Error('glm: the browser profile is busy (' + e.message + ')');
         }
         if (this._carryCookies && this._carryCookies.length) {
-            await this.context
-                .addCookies(this._carryCookies)
-                .catch(() => { });
+            await this.context.addCookies(this._carryCookies).catch(() => { });
         }
         this.page = this.context.pages()[0] || (await this.context.newPage());
         this._windowClosed = false;
@@ -1110,7 +1106,7 @@ export class GlmBrowser {
             const el = document.querySelector(sel);
             if (!el)
                 return false;
-            return el.disabled === true || el.getAttribute('aria-disabled') === 'true';
+            return (el.disabled === true || el.getAttribute('aria-disabled') === 'true');
         }, INPUT_SELECTORS[0])
             .catch(() => false);
         return !!disabled;
@@ -1297,7 +1293,11 @@ export class GlmBrowser {
         return [
             { capability: 'input', selectors: INPUT_SELECTORS, critical: true },
             { capability: 'toggles', selectors: [], critical: false },
-            { capability: 'newChat', selectors: [NEW_CHAT_SELECTOR], critical: false },
+            {
+                capability: 'newChat',
+                selectors: [NEW_CHAT_SELECTOR],
+                critical: false,
+            },
         ];
     }
     async probeUiHealth() {
@@ -1385,7 +1385,8 @@ export class GlmBrowser {
                         this.sendRuntime.onOutcome('guest_limit', { errorText: msg });
                         throw new Error(this._t('glm.guest_mode'));
                     }
-                    if (isQuotaExhaustedText(msg) || isQuotaExhaustedText(this._netBody)) {
+                    if (isQuotaExhaustedText(msg) ||
+                        isQuotaExhaustedText(this._netBody)) {
                         this.sendRuntime.onOutcome('rate_limit', { errorText: 'quota' });
                         throw new Error(this._t('glm.quota_exhausted'));
                     }
@@ -1501,7 +1502,10 @@ export class GlmBrowser {
         try {
             const [chooser] = await Promise.all([
                 this.page.waitForEvent('filechooser', { timeout: 5000 }),
-                this.page.locator(UPLOAD_BUTTON_SELECTOR).first().click({ timeout: 3000 }),
+                this.page
+                    .locator(UPLOAD_BUTTON_SELECTOR)
+                    .first()
+                    .click({ timeout: 3000 }),
             ]);
             await chooser.setFiles(bufPayload);
             await this._awaitUploadPreview(files.map((f) => f.name), 5000);

package/dist/glm-chats.js

@@ -31,9 +31,7 @@ export function scrapeGlmChatList(limit) {
         if (seen.has(m[1]))
             continue;
         seen.add(m[1]);
-        const title = (a.textContent || '')
-            .trim()
-            .replace(/\s+/g, ' ');
+        const title = (a.textContent || '').trim().replace(/\s+/g, ' ');
         out.push({ id: m[1], title });
         if (out.length >= limit)
             break;

package/dist/index.js

@@ -525,9 +525,7 @@ ${theme.bold(t('help.sec.context'))}
   ${t('help.cmd.lang')}
 
 ${theme.bold(t('help.sec.provider'))}
-  ${t('help.cmd.provider')}${providerHasModelPicker(config.provider)
-        ? '\n  ' + t('help.cmd.model')
-        : ''}
+  ${t('help.cmd.provider')}${providerHasModelPicker(config.provider) ? '\n  ' + t('help.cmd.model') : ''}
 
 ${theme.bold(t('help.sec.files'))}
   ${t('help.cmd.transcript')}
@@ -778,7 +776,9 @@ function applyModelContextLimit(model) {
     const section = providerConfigSection(config.provider);
     if (!section)
         return;
-    const window = config.provider === 'qwen' ? qwenContextWindow(model) : glmContextWindow(model);
+    const window = config.provider === 'qwen'
+        ? qwenContextWindow(model)
+        : glmContextWindow(model);
     if (window === null)
         return;
     const sec = activeProviderSection();
@@ -851,7 +851,11 @@ function createProviderBrowser(provider) {
                 answerTimeoutMs: config.glm.answerTimeoutMs,
                 model: config.glm.model,
                 auth: config.glm.auth,
-                sendTelemetry: config.browser.sendTelemetry,
+                // Dev runs (`npm run dev`, i.e. `--dev`) record the telemetry
+                // automatically: it is a diagnostic for the developer. For a regular
+                // user it stays OFF by default (see DEFAULTS in config.ts) and is
+                // opted into with `/config set browser.sendTelemetry true`.
+                sendTelemetry: config.browser.sendTelemetry || devMode,
                 logsDir: config.transcript.dir,
                 loginTimeoutMs: config.browser.loginTimeoutMs,
                 locale: currentLocale,
@@ -1151,7 +1155,8 @@ async function main() {
         await transcript.close();
         return;
     }
-    if (providerNeedsVisibleBrowser(config.provider) && headlessFor(config.provider)) {
+    if (providerNeedsVisibleBrowser(config.provider) &&
+        headlessFor(config.provider)) {
         console.log(theme.warn(t('provider.needs_headed', { v: providerLabel(config.provider) })));
     }
     console.log(theme.system(t('msg.interactive')));
@@ -2735,7 +2740,9 @@ async function main() {
             // (Qwen, GLM). DeepSeek has none, so the command is hidden from the
             // hints there and only explains itself when typed by hand.
             if (!providerHasModelPicker(config.provider)) {
-                console.log(theme.system(t('model.unsupported', { provider: providerLabel(config.provider) })));
+                console.log(theme.system(t('model.unsupported', {
+                    provider: providerLabel(config.provider),
+                })));
                 continue;
             }
             const section = providerConfigSection(config.provider);

package/dist/system-prompt.js

@@ -214,8 +214,8 @@ export function buildSystemPrompt({ workdir, tools, gitContext = null, locale =
     // runs: otherwise it asks for a sandbox ("Limit Sandbox Concurrency") or
     // claims it ran something it did not.
     const runtimeSection = provider === 'glm'
-        ? '\n## You run on the OPERATOR\'S MACHINE (GLM)\n\n' +
-            'The tools above execute on the operator\'s computer, in the working ' +
+        ? "\n## You run on the OPERATOR'S MACHINE (GLM)\n\n" +
+            "The tools above execute on the operator's computer, in the working " +
             'directory shown at the top. They are the ONLY way to touch files or ' +
             'run commands.\n\n' +
             '- There is NO cloud sandbox for you. Do NOT request or use a z.ai ' +
@@ -223,7 +223,7 @@ export function buildSystemPrompt({ workdir, tools, gitContext = null, locale =
             "site's own agent mode and is NOT part of this task.\n" +
             '- Never claim a command ran unless you emitted its tool call and ' +
             'received a tool result. If you have not called the tool, say so.\n' +
-            '- Paths like `/home/z/...` or `/mnt/data` are NOT the operator\'s ' +
+            "- Paths like `/home/z/...` or `/mnt/data` are NOT the operator's " +
             'machine.\n' +
             '- Do NOT use web search / WebSearch unless the task explicitly asks ' +
             'for current web information: it is slow, it burns the account quota ' +

package/dist/tools.js

@@ -403,13 +403,34 @@ export function filterToolsByAllowList(tools, allowed) {
 // mutating VERBS in the tool name. It is a heuristic deny-list, not a proof:
 // an exotic server could name a mutating tool innocuously. The honest default
 // in read-only mode is therefore to drop everything that looks like a writer.
-const MCP_MUTATING_RE = /(^|_)(click|type|navigate|press|upload|select|drag|fill|hover|evaluate|run_code|run_|handle_dialog|key|screenshot|write|create|delete|update|set|put|post|patch|execute|exec|insert|remove|drop|restart|stop|start|install|kill|move|rename|copy|mkdir|rmdir|touch|chmod|chown)(_|$)/;
+const MCP_MUTATING_WORDS = new Set(('click type navigate press upload select drag fill hover evaluate key ' +
+    'screenshot write create delete update set put post patch execute exec ' +
+    'insert remove drop restart stop start install kill move rename copy ' +
+    'mkdir rmdir touch chmod chown').split(' '));
+// Multi-word verbs are matched as a substring of the normalized name: they
+// never stand alone as ONE `_word_`, so a word-set alone missed them.
+const MCP_MUTATING_PHRASES = ['run_code', 'run_', 'handle_dialog'];
+// A camelCase name is split BEFORE it is lowercased: `browserClick` used to
+// become `browserclick` (one word, no verb) and slipped through read-only mode.
+function splitCamelCase(s) {
+    return s.replace(/([a-z0-9])([A-Z])/g, '$1_$2');
+}
 export function isMutatingMcpTool(name) {
     // Strip the server prefix and normalize separators to underscores so the
     // verb matcher sees "browser_click" -> "click".
     const tail = String(name).split('__').pop() || String(name);
-    const norm = tail.toLowerCase().replace(/[^a-z0-9]+/g, '_');
-    return MCP_MUTATING_RE.test('_' + norm + '_');
+    const norm = splitCamelCase(tail)
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '_');
+    if (MCP_MUTATING_PHRASES.some((p) => norm.includes(p)))
+        return true;
+    const words = norm.split('_').filter(Boolean);
+    if (words.some((w) => MCP_MUTATING_WORDS.has(w)))
+        return true;
+    // A CONCATENATED style (all lowercase, no separator: `browserclick`,
+    // `pageevaluate`) still hides a writer. A verb as a substring is safe here
+    // because every verb is a whole action word no read-only tool contains.
+    return [...MCP_MUTATING_WORDS].some((v) => norm.includes(v));
 }
 // Merge MCP tools into the base set. In read-only (plan) mode the MCP tools
 // must be filtered too: an MCP server (e.g. @playwright/mcp) exposes mutating

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.81.0",
+  "version": "2.81.2",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {