zames_pro 2.81.21 → 2.81.23

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.81.23] - 2026-10-22
+
+### Fixed
+
+- **resume:** a respond message carrying the safety block is hidden
+
+## [2.81.22] - 2026-10-22
+
+### Fixed
+
+- **parser:** a tool call whose args are a JSON string is recognized
+
 ## [2.81.21] - 2026-10-22
 
 ### Fixed

package/dist/answer-parse.js

@@ -221,15 +221,43 @@ function repairRawControlChars(str) {
     }
     return out;
 }
+/** True when a value is a string holding the JSON of a plain object. */
+function isJsonObjectString(v) {
+    if (typeof v !== 'string')
+        return false;
+    try {
+        const parsed = JSON.parse(v);
+        return !!parsed && typeof parsed === 'object' && !Array.isArray(parsed);
+    }
+    catch {
+        return false;
+    }
+}
+/** Unwrap a JSON-string `args` into an object; return the value as-is otherwise. */
+function coerceArgsObject(v) {
+    if (typeof v === 'string') {
+        try {
+            const parsed = JSON.parse(v);
+            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+                return parsed;
+            }
+        }
+        catch { }
+    }
+    return v;
+}
 function tryParse(str) {
     try {
         const obj = JSON.parse(str);
         if (obj &&
             typeof obj.tool === 'string' &&
             obj.args &&
-            typeof obj.args === 'object' &&
+            // `args` may arrive as a JSON STRING (double-encoded): unwrap it when it
+            // parses to a plain object, otherwise the call is not recognized at all
+            // and the run either re-asks or ends with the JSON as the final answer.
+            (typeof obj.args === 'object' || isJsonObjectString(obj.args)) &&
             !Array.isArray(obj.args)) {
-            return obj;
+            return { tool: obj.tool, args: coerceArgsObject(obj.args) };
         }
         return null;
     }

package/dist/commands.js

@@ -487,6 +487,11 @@ export function normalizeRestoredMessage(m) {
         const msg = (call.message || '').trim();
         if (!msg)
             return null;
+        // The safety-classification block can sit INSIDE the respond message; the
+        // plain-text path already drops it, and printing the marker as the answer
+        // is the same leak.
+        if (/<\/?ds_safety\b/i.test(msg))
+            return null;
         return { role: 'assistant', text: msg };
     }
     // A plain-text answer (written without the respond wrapper) — show as-is.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.81.21",
+  "version": "2.81.23",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {