zames_pro 2.82.115 → 2.82.117

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.117] - 2026-10-24
+
+### Fixed
+
+- **commands:** operator text cannot spoof a queued-message boundary
+
+## [2.82.116] - 2026-10-24
+
+### Fixed
+
+- **attachments:** wait for the upload chip by exact file name
+
 ## [2.82.115] - 2026-10-24
 
 ### Fixed

package/dist/attach-flow.js

@@ -41,8 +41,12 @@ export async function awaitUploadPreview(page, names, timeoutMs) {
             // rejected promise, not a synchronous throw — without the try/catch the
             // error escaped into `_attachFiles` and the whole attach failed. A
             // lookup error means "not visible yet", exactly like a failed count.
+            //
+            // `exact: true`: a SUBSTRING match found a short/common name (`a`,
+            // `image`) in unrelated page text and returned instantly, before the
+            // upload started. The chip carries the FULL name.
             const n = await Promise.resolve()
-                .then(() => page.getByText(name, { exact: false }).count())
+                .then(() => page.getByText(name, { exact: true }).count())
                 .catch(() => 0);
             if (n > 0)
                 return;

package/dist/commands.js

@@ -1030,7 +1030,27 @@ export function mergeMessages(msgs) {
         list.length +
         ' messages while you were working. They are listed below in order — ' +
         'treat them as one instruction.';
-    const text = header + NL + NL + parts.join(NL + NL + '---' + NL + NL);
+    // The parts are OPERATOR text: a line that reads `---` (a Markdown rule, a
+    // pasted diff) would spoof a message boundary and the model would see an
+    // extra message. Neutralize such a line inside a part; the separator below
+    // stays the only one.
+    // The message text is OPERATOR input: a line that reads `---` (a Markdown
+    // rule, a pasted diff) or repeats the header sentence spoofs a message
+    // BOUNDARY / count — the model then sees an extra message that never
+    // existed. Neutralize both inside a part; the real header and separator
+    // below stay the only ones.
+    const headerLine = /^\s*The operator sent \d+ messages? while you were working/i;
+    const safeParts = parts.map((p) => p
+        .split(NL)
+        .map((line) => headerLine.test(line) ? line.replace(/^\s*/, '> ') : line)
+        .map((line) => /^\s*-{3,}\s*$/.test(line)
+        ? line.replace(/-/g, String.fromCharCode(92) + '-')
+        : line)
+        .map((line) => /^\s*-{3,}\s*$/.test(line)
+        ? line.replace(/-/g, String.fromCharCode(92) + '-')
+        : line)
+        .join(NL));
+    const text = header + NL + NL + safeParts.join(NL + NL + '---' + NL + NL);
     // Keep the FIRST scheduled job id in the batch so the ticker still knows a
     // copy of that job is in flight (see MergedMessage.jobId).
     const jobId = list.find((m) => m.jobId !== undefined)?.jobId;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.115",
+  "version": "2.82.117",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {