zames_pro 2.82.123 → 2.82.124

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.124] - 2026-10-24
+
+### Fixed
+
+- **mcp:** a schema property named __proto__ becomes a real parameter
+
 ## [2.82.123] - 2026-10-24
 
 ### Fixed

package/dist/mcp.js

@@ -158,7 +158,11 @@ export async function loadConfigFiles(files) {
 // We also keep the full schema in the tool description, so the model sees
 // descriptions/enums/required fields that the flat map cannot convey.
 export function jsonSchemaToParams(schema) {
-    const out = {};
+    // Property NAMES come from the server and are arbitrary text: assigning to a
+    // plain object, a name like `__proto__` mutates the object's PROTOTYPE and
+    // the parameter silently disappears from the prompt (the same class as the
+    // tool-count maps in /cost). Null-prototype map: every key is an own key.
+    const out = Object.create(null);
     if (!schema || typeof schema !== 'object')
         return out;
     const s = schema;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.123",
+  "version": "2.82.124",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {