zames_pro 2.82.109 → 2.82.111

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.111] - 2026-10-24
+
+### Fixed
+
+- **cost:** a tool name with a newline cannot break the /cost report
+
+## [2.82.110] - 2026-10-24
+
+### Fixed
+
+- **commands:** a dollar token inside a custom-command argument is not expanded twice
+
 ## [2.82.109] - 2026-10-24
 
 ### Fixed

package/dist/commands.js

@@ -229,10 +229,14 @@ export function renderCost(stats, transcriptFile, tokenUsage = null, t = transla
         lines.push(t('cost.auto_compacts', { n: String(stats.autoCompacts) }));
     }
     const top = Object.entries(stats.toolCounts).sort((a, b) => b[1] - a[1]);
+    // A tool NAME is arbitrary text (the model invents it, an MCP server
+    // declares it): a newline would start a new line of the report and could
+    // spoof an `[OK]` doctor row. Collapse it to one line.
+    const nameLine = (v) => v.replace(/\s+/g, ' ');
     if (top.length) {
         lines.push(t('cost.by_tool'));
         for (const [name, n] of top)
-            lines.push(' ' + name + ': ' + n);
+            lines.push(' ' + nameLine(name) + ': ' + n);
     }
     // T-D3: where the time went. Sort by total ms, show the top tools with the
     // count and a human duration, so Read→Edit cycles and slow Bash calls are
@@ -244,7 +248,7 @@ export function renderCost(stats, transcriptFile, tokenUsage = null, t = transla
         lines.push(t('cost.by_time', { dur: formatDuration(stats.toolMs) }));
         for (const [name, ms] of byTime.slice(0, 8)) {
             const count = stats.toolCounts[name] ?? 0;
-            lines.push(' ' + name + ': ' + formatDuration(ms) + ' ×' + count);
+            lines.push(' ' + nameLine(name) + ': ' + formatDuration(ms) + ' ×' + count);
         }
     }
     lines.push(t('cost.duration', { dur: formatDuration(stats.durationMs) }));
@@ -886,10 +890,32 @@ function replaceDollarTokens(s, parts, names) {
 // it is unit-tested.
 export function expandCommandArgs(body, rest, names = []) {
     const parts = splitCommandArgs(rest);
+    // Scan the BODY only: the operator's arguments are DATA and must not be
+    // re-scanned for `$1`/`$name`. Substituting them into the text FIRST and
+    // running the dollar pass over the result rewrote an argument that merely
+    // contained `$1` (`/cmd real $1` sent `real real`). A unique placeholder is
+    // parked for every `{{args}}`/`$ARGUMENTS` occurrence and restored after the
+    // positional pass.
+    const parked = [];
     let out = String(body ?? '');
-    out = out.split('{{args}}').join(rest);
-    out = out.split('$ARGUMENTS').join(rest);
+    const park = () => {
+        const key = String.fromCharCode(0x1f) +
+            'a' +
+            parked.length +
+            String.fromCharCode(0x1f);
+        parked.push(rest);
+        return key;
+    };
+    out = out.split('{{args}}').join(park());
+    out = out.split('$ARGUMENTS').join(park());
     out = replaceDollarTokens(out, parts, names);
+    for (let i = 0; i < parked.length; i++) {
+        const key = String.fromCharCode(0x1f) + 'a' + i + String.fromCharCode(0x1f);
+        out = out.split(key).join(parked[i]);
+    }
+    // The placeholder uses a control character that cannot appear in a normal
+    // body; a body that DOES contain it (a binary snippet) is left untouched
+    // because its text is not a generated key.
     return out.trim();
 }
 // Names declared in `arguments:` but not supplied on the command line (by

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.109",
+  "version": "2.82.111",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {