zames_pro 2.82.112 → 2.82.114

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.114] - 2026-10-24
+
+### Fixed
+
+- **scheduler:** a multi-line job task cannot fake a /jobs line
+
+## [2.82.113] - 2026-10-24
+
+### Fixed
+
+- **status:** a multi-line goal cannot fake a /status line
+
 ## [2.82.112] - 2026-10-24
 
 ### Fixed

package/dist/scheduler.js

@@ -175,18 +175,23 @@ export function nextCronTime(expr, fromMs) {
 // One listing line for a job: "#3 [every 10m, next ~5m] run the tests". Pure,
 // so the /jobs formatting is unit-tested without a live scheduler.
 export function formatJobLine(job, now) {
+    // The TASK and the CRON expression are operator text and must stay on ONE
+    // line: a newline would start a new /jobs row and could fake another
+    // report's line. Collapse whitespace in both.
+    const oneLine = (v) => String(v ?? '').replace(/\s+/g, ' ');
     const when = job.kind === 'loop'
         ? 'every ' + formatInterval(job.intervalMs || 0)
-        : job.cron || '';
+        : oneLine(job.cron || '');
+    const task = oneLine(job.task);
     // A cron job whose next fire could not be computed stores Infinity (see
     // due()). "next ~-" (formatInterval maps a non-finite value to '-') read
     // like a normal schedule, so the job looked healthy while it could never
     // fire again.
     if (!Number.isFinite(job.nextAt)) {
-        return '  #' + job.id + ' [' + when + ', NEVER fires again] ' + job.task;
+        return '  #' + job.id + ' [' + when + ', NEVER fires again] ' + task;
     }
     const nextIn = formatInterval(Math.max(0, job.nextAt - now));
-    return '  #' + job.id + ' [' + when + ', next ~' + nextIn + '] ' + job.task;
+    return '  #' + job.id + ' [' + when + ', next ~' + nextIn + '] ' + task;
 }
 // Holds the scheduled jobs. Pure: no timers here. index.ts drives it with a
 // 1-second tick and enqueues the tasks that `due()` returns.

package/dist/status-command.js

@@ -27,7 +27,11 @@ export function formatStatus(s, t = translate('en')) {
     lines.push(t('status.undo', { v: onoff(s.undo) }));
     lines.push(t('status.checkpoint', { v: onoff(s.checkpoint) }));
     lines.push(t('status.transcript', { v: s.transcriptFile || t('common.off') }));
-    lines.push(t('status.goal', { v: s.goal || none }));
+    // The GOAL is operator text (`/goal <free text>`) and a newline in it would
+    // start a new terminal line, faking another status row (`FAKE: hacked`) —
+    // one status entry must stay on one line.
+    const oneLine = (v) => String(v ?? '').replace(/\s+/g, ' ');
+    lines.push(t('status.goal', { v: s.goal ? oneLine(s.goal) : none }));
     lines.push(t('status.locale', { v: s.localeName }));
     lines.push(t('status.mcp', { v: s.mcpToolCount === null ? none : s.mcpToolCount }));
     // A NEGATIVE count is nonsense (a broken provider counter): show "unknown"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.112",
+  "version": "2.82.114",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {