zames_pro 2.82.137 → 2.82.139

package/dist/config.js

@@ -611,14 +611,11 @@ export function getConfigField(path) {
 }
 export function getByPath(obj, path) {
     const parts = path.split('.');
-    // Same guard as setByPath: a dotted path must never reach the PROTOTYPE
-    // chain. `__proto__` used to return Object.prototype (an object), and
-    // `constructor` / `toString` the corresponding FUNCTION — the /config list
-    // then rendered `{}` for a field whose path did not exist instead of the
-    // default marker. Reading those keys is never meaningful for a config path.
-    // `toString`, `valueOf`, `hasOwnProperty`, ... are inherited METHODS, not
-    // config values: reading them through a dotted path returned a FUNCTION.
-    // Only an OWN property counts.
+    // Two guards, both load-bearing. UNSAFE_PATH_KEYS keeps a dotted path off
+    // the PROTOTYPE chain (`__proto__` answered Object.prototype, `constructor`
+    // a function, and the /config list rendered `{}` instead of the default
+    // marker). The hasOwnProperty check keeps inherited METHODS out: `toString`
+    // / `valueOf` are not config values, and only an OWN property counts.
     if (parts.some((p) => UNSAFE_PATH_KEYS.has(p)))
         return undefined;
     let cur = obj;

package/dist/deepseek-ui.js

@@ -45,9 +45,9 @@ export const SEND_SELECTORS = [
     'button[aria-label*="отправ" i]',
 ];
 // DeepSeek's own button classes. Used as a coarse "is this a DeepSeek button?"
-// filter in the raw-DOM fallbacks for Stop and for the send/stop icon
-// detection. Kept as a source string because the fallback runs INSIDE
-// page.evaluate, which cannot receive a RegExp object.
+// filter in the raw-DOM fallbacks for Stop and the send/stop icon detection.
+// Passed to page.evaluate as a source string (`.source`), because the in-page
+// callback cannot receive a RegExp object.
 export const BUTTON_CLASS_RE = /ds-button--(circle|primary|filled)/i;
 // ---------- stop ----------
 export const STOP_SELECTORS = [
@@ -108,10 +108,10 @@ export const MESSAGE_CONTAINER_SELECTORS = [
 export const ASSISTANT_CLASS_RE = /ds-assistant-message|assistant-message/i;
 export const ASSISTANT_SELECTOR = '[class*="ds-assistant-message"]';
 export const ANSWER_MARKDOWN_SELECTOR = '[class*="ds-markdown"]';
-// A cheap "did the page grow?" signal (_chatSignal): count message nodes and
-// measure the LAST answer node's text length. The old code read
-// document.body.innerText.length every tick, which serializes the WHOLE page
-// (sidebar, history, menus) and forces a layout — expensive on a long chat.
+// The node/markdown selectors for the cheap "did the page grow?" signal
+// (chatSignalInDom): counting message nodes and measuring the LAST answer's
+// length instead of document.body.innerText.length, which serializes the WHOLE
+// page (sidebar, history, menus) and forces a layout on every tick.
 export const CHAT_SIGNAL_NODES_SELECTOR = '[class*="ds-message"], [class*="chat-message"], .ds-markdown';
 export const MARKDOWN_SELECTOR = '.ds-markdown';
 // ---------- new chat ----------

package/dist/diagnostics.js

@@ -24,13 +24,11 @@ export function summarizeDiagnostics(raw, maxChars) {
     if (!text)
         return null;
     // tsc prints nothing on success, but with `--watch` it prints a banner
-    // ("Found 0 errors. Watching for file changes.") that is longer than the
-    // old 40-char cutoff — so every edit in watch mode appended a pointless
-    // diagnostics block to the tool result. Treat a ZERO-count banner as clean
-    // however long it is; a non-zero count still falls through to the lines.
-    // Strip ANSI colour codes and a leading `[12:00:00]`-style timestamp before
-    // the clean checks: a watch-mode banner is usually coloured and/or
-    // prefixed, and the anchored regexes missed it — every edit then
+    // ("Found 0 errors. Watching for file changes."). Treat a ZERO-count banner
+    // as clean however long it is; a non-zero count still falls through to the
+    // lines. The banner is usually coloured and/or prefixed with a
+    // `[12:00:00]`-style timestamp, so both are stripped before the clean
+    // checks — with them in place the anchored regexes missed it and every edit
     // appended a pointless diagnostics block.
     const plain = text.replace(/\x1b\[[0-9;?]*[A-Za-z]/g, '');
     const cleanCheck = plain.replace(/^\[[^\]]*\]\s*/, '');

package/dist/diff.js

@@ -5,12 +5,11 @@ export function unifiedDiff(a, b, { label = '' } = {}) {
     const out = [];
     if (label)
         out.push('... ' + label);
-    // A LINE diff, not a positional compare: an insertion at the top of a
-    // file shifts every following line, and comparing line i with line i
-    // reported the WHOLE file as removed AND added (a 20-line file with one
-    // new first line produced 41 diff lines). The undo/`/diff` preview became
-    // unreadable and the model was told everything changed. A longest-common-
-    // subsequence walk emits only the lines that really differ.
+    // A LINE diff, not a positional compare: an insertion at the top shifts
+    // every following line, and comparing line i with line i reported the WHOLE
+    // file as removed AND added (a 20-line file with one new first line produced
+    // 41 diff lines), which made the undo preview unreadable and told the model
+    // that everything changed.
     for (const op of diffOps(la, lb)) {
         if (op.kind === 'same')
             continue;
@@ -19,10 +18,9 @@ export function unifiedDiff(a, b, { label = '' } = {}) {
     return out.join(String.fromCharCode(10));
 }
 /**
- * Longest-common-subsequence line diff (Hunt–Szymanski style table, O(n*m)
- * memory). Files here are a handful of lines (a single edit preview), so the
- * simple dynamic-programming table is fine and keeps the module dependency-
- * free. A change pair is emitted as `-old` then `+new`, like a real diff.
+ * Longest-common-subsequence line diff (an O(n*m) dynamic-programming table,
+ * which keeps the module dependency-free). A change pair is emitted as
+ * `-old` then `+new`, like a real diff.
  */
 function diffOps(a, b) {
     const n = a.length;

package/dist/extraTools.js

@@ -1,14 +1,14 @@
 import fs from 'fs/promises';
 import path from 'path';
 import { safePath } from './sandbox.js';
-// Extra tools that bring zames closer to Claude Code / Codex CLI:
+// Extra tools borrowed from Claude Code / Codex CLI:
 //   * LS         - list a directory (Claude Code has LS; Codex has list_dir)
 //   * MultiEdit  - several edits to ONE file applied atomically (Claude Code)
 //   * ApplyPatch - multi-file V4A-style patch (Codex apply_patch)
 //   * TodoWrite  - session task checklist (Claude Code TodoWrite)
 //
-// The core file tools (Read/Write/Edit/Bash/Glob/Grep) live in tools.ts.
-// These are additive: they do not change the existing tool behaviour.
+// The core file tools (Read/Write/Edit/Bash/Glob/Grep) live in tools.ts; these
+// are additive and do not change their behaviour.
 const NL = String.fromCharCode(10);
 function decodeContent(content, contentBase64) {
     if (typeof contentBase64 === 'string' && contentBase64.length) {

package/dist/fsutil.js

@@ -6,10 +6,6 @@ import path from 'path';
 // truncated/broken file behind. The temp name embeds the pid so two
 // concurrent processes never collide on it.
 //
-// Kept in its own module because the pattern used to be copy-pasted in at
-// least three places; drift between the copies is exactly how one of them
-// silently loses its atomicity.
-//
 // The file is created 0o600: ~/.zames/config.json holds the
 // browser password in clear text alongside sessions/undo history, and the
 // default umask (022) would make them readable by other users on a

package/dist/gitTools.js

@@ -89,9 +89,9 @@ export async function getGitContext(workdir) {
     const remoteR = await runGitArgs(['remote'], workdir, 5000);
     const aheadR = await runGitArgs(['rev-list', '--left-right', '--count', '@{upstream}...HEAD'], workdir, 5000);
     const branch = branchR.trim() || '(detached HEAD)';
-    // The shared runner answers an EMPTY successful run with a sentinel. Storing
-    // it verbatim told the model the tree had a modified "file" that is really
-    // an internal string — every task started with a false dirty-tree premise.
+    // The sentinel is an internal string, not a path: kept verbatim it told the
+    // model the tree had a modified "file" by that name, so every task started
+    // with a false dirty-tree premise.
     const statusText = statusR.trim() === NO_OUTPUT_SENTINEL ? '' : statusR;
     const statusLines = statusText
         .split(String.fromCharCode(10))
@@ -286,7 +286,8 @@ export function createGitTools(workdir) {
                 if (!msg.trim()) {
                     return 'Error: message is empty.';
                 }
-                // We stage everything only if the index is empty (as the description promises).
+                // Stage everything only when the index is empty, which is what the tool
+                // description promises the model.
                 const staged = await runGitArgs(['diff', '--cached', '--name-only'], workdir, 10_000);
                 const stagedTrimmed = staged.trim();
                 const hasStaged = stagedTrimmed !== '' && stagedTrimmed !== NO_OUTPUT_SENTINEL;

package/dist/glm-browser.js

@@ -3,8 +3,8 @@
 // WHY a separate class (the same reason QwenBrowser exists): the backends
 // differ in EVERY layer we touch — selectors, the send flow, the SSE format and
 // the chat-id scheme. The shared surface is the ChatProvider interface
-// (types.ts); the agent loop only needs BrowserLike and never sees either
-// concrete class.
+// (types.ts); the agent loop only needs BrowserLike and never sees a concrete
+// class.
 //
 // Verified against a LIVE signed-in session (headless + headed Chromium):
 //   input  -> textarea#chat-input
@@ -233,7 +233,6 @@ export class GlmBrowser {
     sendIntervalMs() {
         return this.sendRuntime.intervalMs();
     }
-    // ---------- lifecycle ----------
     async launch() {
         if (await profileLooksLocked(GLM_USER_DATA_DIR)) {
             if (this.debug)
@@ -398,7 +397,6 @@ export class GlmBrowser {
         }
         throw new Error('glm: the browser profile is still locked');
     }
-    // ---------- login ----------
     /**
      * A FAST login probe with NO long waits (the old isLoggedIn polled up to
      * 20 s, which is a false "logged out" on a slow network). The signal is the
@@ -754,7 +752,6 @@ export class GlmBrowser {
         }
         catch { }
     }
-    // ---------- network capture ----------
     _installNetHook() {
         const pg = this.page;
         if (!pg)
@@ -857,7 +854,6 @@ export class GlmBrowser {
         }
         catch { }
     }
-    // ---------- chat management ----------
     async newChat() {
         const before = await this.getCurrentChatId();
         const btn = this.page.locator(NEW_CHAT_SELECTOR).first();
@@ -1081,7 +1077,6 @@ export class GlmBrowser {
     getLastTokenUsage() {
         return this._lastTokenUsage;
     }
-    // ---------- answer reading ----------
     async _readLastAnswerText() {
         if (this._netCapture && this._netCaptureAt >= this._lastSentAt) {
             return this._netCapture;
@@ -1239,7 +1234,6 @@ export class GlmBrowser {
         }
         catch { }
     }
-    // ---------- toggles ----------
     getToggleStatesSync() {
         return this._toggles;
     }
@@ -1295,7 +1289,6 @@ export class GlmBrowser {
             this._notice(this._t('glm.mode_mismatch', { v: mismatch.join(', ') }));
         }
     }
-    // ---------- diagnostics ----------
     async dumpDom(filePath) {
         if (!this.page)
             throw new Error('glm: browser not launched');
@@ -1332,7 +1325,6 @@ export class GlmBrowser {
     chatUrl(id) {
         return chatUrl(id);
     }
-    // ---------- ask ----------
     async _waitForSendSlot(agent) {
         if (!agent)
             return;

package/dist/glm-chats.js

@@ -78,7 +78,6 @@ export function scrapeGlmChatMessages(opts) {
     }
     return out;
 }
-// ---------- API payload parsers (pure, unit-tested) ----------
 /**
  * Parse `GET /api/v1/chats/?page=1`. The live shape is a BARE ARRAY; older /
  * other builds wrap it in `{data:[...]}` or key it by id. Returns [] for

package/dist/glm-net-capture.js

@@ -280,7 +280,6 @@ function hasAnswerContent(body) {
 // ERROR payload (`type: "error"` / a code) or as a bare notice with NO answer
 // content; answer text lives in `phase: "answer"` chunks.
 const ERROR_PAYLOAD_RE = /"type"\s*:\s*"error"|"error"\s*:|\{\s*"code"\s*:/i;
-/** True when the RAW body is z.ai's rate-limit notice. */
 /**
  * True when z.ai answers that the ACCOUNT quota is exhausted
  * (`insufficient_quota`, HTTP 429). Distinct from a transient rate limit:
@@ -299,6 +298,7 @@ export function isQuotaExhaustedText(body) {
         return false;
     return /insufficient_quota|quota (?:exceeded|exhausted)|exceeded your current quota/i.test(b);
 }
+/** True when the RAW body is z.ai's rate-limit notice. */
 export function isRateLimitText(body) {
     const b = String(body || '');
     if (!b)

package/dist/glm-ui.js

@@ -162,8 +162,8 @@ export const GUEST_LIMIT_RE = /guest.*limit|log ?in to continue|sign ?in to cont
 // The completion body carries the mode flags. `preview_mode` and the
 // `general_agent` flag change the ANSWER FORMAT (they enable z.ai's own agent
 // runtime, which emits its own tool calls), and that would break the zames
-// tool-call protocol. The provider asserts the safe values on every send; the
-// request body is verified per chat (see glm-net-capture.ts).
+// tool-call protocol. The request body is rewritten before the send and then
+// verified (glm-browser's _installRuntimeRewrite/_verifyModes + glm-flags).
 export const SAFE_PREVIEW_MODE = false;
 export const SAFE_ENABLE_THINKING = true;
 // ---------- attachments ----------

package/dist/goal.js

@@ -69,13 +69,10 @@ export function buildContinuationDirective(reason) {
         // Collapse whitespace in the model-written reason: a NEWLINE started a new
         // line of the directive, letting the evaluator's text inject an extra
         // instruction into the next turn.
-        (argumentReason(reason)
+        (String(reason ?? '').trim()
             ? 'Evaluator note: ' + String(reason).trim().replace(/\s+/g, ' ')
             : ''));
 }
-function argumentReason(reason) {
-    return String(reason ?? '').trim().length > 0;
-}
 /**
  * The text a verdict may be read from. A plain answer is returned as-is; a
  * TOOL CALL (JSON or DSML/XML) yields only its `respond` message, because the

package/dist/i18n/common.js

@@ -199,7 +199,7 @@ export const commonMessages = {
         ru: '📎 Вложен файл {marker} {name} ({size}) — {path}',
         en: '📎 Attached file {marker} {name} ({size}) — {path}',
     },
-    // B5: shown when `@path` references in a task were inlined as file contents.
+    // Shown when `@path` references in a task were inlined as file contents.
     'msg.at_refs': {
         ru: '📄 Встроено файлов по @-ссылкам: {n} —',
         en: '📄 Inlined @-referenced files: {n} —',
@@ -303,7 +303,7 @@ export const commonMessages = {
     },
     'cost.auto_compacts': { ru: ' авто-сжатий: {n}', en: ' auto-compacts: {n}' },
     'cost.by_tool': { ru: ' по инструментам:', en: ' by tool:' },
-    // T-D3: total time spent inside tools, then a top-N per-tool breakdown.
+    // Total time spent inside tools, then a top-N per-tool breakdown.
     'cost.by_time': {
         ru: ' время в инструментах: {dur}; топ по времени:',
         en: ' time in tools: {dur}; top by time:',

package/dist/i18n.js

@@ -2,8 +2,7 @@
 //
 // Goals:
 //   * change the interface language (help, service messages);
-//   * the agent's answer language — via the system-prompt;
-//   * the agent's answer language for a plain language.
+//   * the agent's answer language — via the system-prompt.
 //
 // Strategy: a single key->translation map. New keys are easy to add.
 // Russian texts (ru) are the default, English (en) is the alternative.

package/dist/index.js

@@ -76,7 +76,6 @@ function authMarkerExists(provider = config.provider) {
         return false;
     }
 }
-// ---------- CLI parsing ----------
 // The pure helpers live in src/cli-args.ts and are bound to this process's
 // argv ONCE here. Call sites keep using getArg/hasFlag/getPositional.
 const { getArg, hasFlag, getPositional } = createCliArgs(process.argv.slice(2));
@@ -182,7 +181,6 @@ if (jsonMode) {
         console.error(...a);
     });
 }
-// ---------- session persistence ----------
 // We store sessions (DeepSeek chats) in ~/.zames/.sessions so they survive
 // a restart and are available for explicit restore (--resume-last,
 // --chat <id>, /resume-id <id>). They are NOT brought up automatically on launch.
@@ -231,7 +229,6 @@ async function saveGoal(workdir, goal) {
         // best-effort: a failed write must not break the command
     }
 }
-// ---------- hot reload ----------
 // We keep references to the logic modules in the mod object. The /reload
 // command re-reads them via a dynamic import with a timestamp query — Node
 // caches ESM by URL, so such an import returns a fresh version of the module.
@@ -406,7 +403,6 @@ function warnIfBrowserChanged() {
     }
     catch { }
 }
-// ---------- helpers ----------
 function printHelp() {
     // Self-development commands (backlog / self-review) are shown ONLY in dev
     // mode. A regular package install must not advertise them to the user — and
@@ -689,7 +685,6 @@ async function cleanTmpDir() {
             console.error('tmp: cleanup failed:', e.message);
     }
 }
-// ---------- workdir resolution ----------
 // The agent works in the directory it was launched from (process.cwd()).
 // This is the sandbox root: tools cannot go above it.
 async function resolveWorkdir() {
@@ -701,7 +696,6 @@ async function resolveWorkdir() {
     }
     return dir;
 }
-// ---------- restored dialogue ----------
 /**
  * The answer timeout for a one-off provider call (compact summary, etc.).
  * Qwen's cold guest turns are far slower than DeepSeek's, so using
@@ -1403,7 +1397,6 @@ async function main() {
     // Timestamp of the last Ctrl+C while the agent was busy. Two presses
     // within 2s escalate from "abort the running tool" to "stop the whole run".
     let lastCtrlCAt = 0;
-    // ---------- review mode state ----------
     // null — normal mode.
     // { snapDir, snapName, originalWorkdir } — we're inside a snapshot, the chat
     // is already initialized with the review prompt, the user can just type "fix...".
@@ -1458,7 +1451,6 @@ async function main() {
             console.error(theme.error(t('msg.open_chat_error', { v: e.message })));
         }
     }
-    // ---------- input: permanent line below + status above ----------
     // In TTY we use LineEditor: it owns the input all the time, shows the
     // status above the input line and prints the agent's answers ABOVE it, so
     // the typed text is never overwritten by output. In non-TTY (pipe) —
@@ -1878,7 +1870,6 @@ async function main() {
         edAny._origLog = origLog;
         edAny._origErr = origErr;
     }
-    // ---------- /config ----------
     // View and edit settings without a restart. Values are validated against
     // CONFIG_SCHEMA (src/config.ts) and written to the project .zamesrc.json.
     // The language (ui.locale) is applied immediately: we change currentLocale,
@@ -2407,7 +2398,6 @@ async function main() {
             }
             continue;
         }
-        // ---------- Self-review ----------
         if (lower === '/self-review' || lower.startsWith('/self-review ')) {
             const focus = trimmed.slice('/self-review'.length).trim();
             // Remember where to return
@@ -2571,7 +2561,6 @@ async function main() {
             }
             continue;
         }
-        // ---------- Regular commands ----------
         if (lower === '/chats' || lower.startsWith('/chats ')) {
             const filter = trimmed.slice('/chats'.length).trim().toLowerCase();
             const spin = editor || mod.createSpinner(currentLocale);

package/dist/input/suggest.js

@@ -107,13 +107,10 @@ export function completeSlashCommand(buf, sugg, selected) {
             prefix = prefix.slice(0, -1);
         }
     }
-    // Stop shrinking at the TYPED text: with an empty buffer the list matches
-    // everything, and the shared prefix used to shrink down to a bare "/" (or a
-    // common first letter like "/h") — Tab then inserted something the operator
-    // never typed. A completion must EXTEND what is already there.
-    // With an EMPTY buffer everything matches and the shared prefix collapses
-    // to a bare "/" (or a common first letter like "/h"): Tab must not guess a
-    // command the operator has not started typing.
+    // A completion must EXTEND what is already typed: with an empty buffer the
+    // list matches everything and the shared prefix used to collapse to a bare
+    // "/" (or a common first letter like "/h"), so Tab inserted something the
+    // operator never typed.
     if (typed.length < 2)
         return null;
     if (!prefix.toLowerCase().startsWith(typed))

package/dist/input.js

@@ -96,7 +96,7 @@ export class LineEditor {
     // is stored so it can be removed in dispose().
     _onResize;
     _resizeTimer;
-    // ESC disambiguation (N29): a read may end on a bare ESC that is really the
+    // ESC disambiguation: a read may end on a bare ESC that is really the
     // head of a control sequence split across two reads. We hold it briefly and
     // fire onEscape only if no tail arrives.
     _escPending;
@@ -644,7 +644,6 @@ export class LineEditor {
         this.pastes = [];
         this._render();
     }
-    // ---------- rendering ----------
     _eraseBlock() {
         if (!this.rendered)
             return;
@@ -936,7 +935,6 @@ export class LineEditor {
         process.stdout.write(String(text) + NL);
         this._writeBlock();
     }
-    // ---------- spinner-compatible interface ----------
     setStatus(text) {
         this.statusText = text || '';
         this._render();
@@ -1124,7 +1122,6 @@ export class LineEditor {
         const wrapped = wrapToWidth('⚠ ' + msg, maxW);
         this.printAbove(NL + theme.warn(wrapped));
     }
-    // ---------- input ----------
     _submit() {
         if (this.locked) {
             this._render();
@@ -1367,7 +1364,7 @@ export class LineEditor {
     }
     // Bare ESC: wait a moment for a possible control-sequence tail before firing
     // onEscape. Without this a sequence split across two reads (ESC, then "[A")
-    // looked like a lone Escape and aborted the current generation (N29).
+    // looked like a lone Escape and aborted the current generation.
     _scheduleEscape() {
         this._escPending = true;
         if (this._escTimer)
@@ -1460,7 +1457,6 @@ export class LineEditor {
         chars.splice(this.cursor, i - this.cursor);
         this.buf = chars.join('');
     }
-    // ---------- history ----------
     _historyUp() {
         if (!this.history.length)
             return;
@@ -1485,7 +1481,6 @@ export class LineEditor {
         }
         this.cursor = Array.from(this.buf).length;
     }
-    // ---------- reverse-search (Ctrl+R) ----------
     // Start an incremental reverse search, keeping the current buffer aside so
     // Esc restores it (bash behavior). An empty history leaves the editor
     // untouched.
@@ -1596,7 +1591,7 @@ export class LineEditor {
         // A previous read ended on a bare ESC. That is ambiguous: the Escape key
         // or the head of a control sequence split across reads (arrows, Ctrl+Del).
         // Reattach the ESC and parse the whole sequence, so a split arrow does not
-        // abort the generation (N29).
+        // abort the generation.
         if (this._escPending) {
             this._escPending = false;
             if (this._escTimer) {

package/dist/markdown.js

@@ -15,7 +15,6 @@ const theme = {
     tableHeader: { color: '#9fb8d8', bold: true },
     tableCell: { color: '#d0d0d0' },
 };
-// Code highlighting via cli-highlight (already present transitively).
 function highlighter(code, lang) {
     try {
         return highlight(code, {

package/dist/mcp.js

@@ -477,11 +477,8 @@ export async function createMcpPool(opts) {
         }
     }
     // Distinct servers can produce the SAME qualified name (server 'a' + tool
-    // 'b__c' vs server 'a__b' + tool 'c'), and agent-loop resolves a call with
-    // tools.find(name) — it takes the FIRST. A duplicate would make the second
-    // tool silently unreachable (the model calls "the right name", a DIFFERENT
-    // tool runs). Rename the later one with a numeric suffix so every name is
-    // unique.
+    // 'b__c' vs server 'a__b' + tool 'c'); dedupeToolNames below explains why
+    // that has to be fixed rather than left to tools.find().
     dedupeToolNames(tools);
     let closed = false;
     return {

package/dist/net-capture.js

@@ -259,7 +259,7 @@ export function isFinishedWithAnswer(body) {
         return false;
     // A truncated RESPONSE head (a lone `{`) is NOT a complete answer: the
     // finish loop would return it as the model's text and the tool-call parser
-    // would fail on it. Require real content (see MIN_FINISHED_ANSWER_CHARS).
+    // would fail on it. Require real content (see responseTextLength).
     return responseContentLength(b) >= MIN_REAL_ANSWER_CHARS;
 }
 // The CONTEXT size (in tokens) DeepSeek reports for the current answer.

package/dist/path-token.js

@@ -118,15 +118,11 @@ export function extractAtFileRefs(text) {
         }
         let j = i + 1;
         let tok = '';
-        // The token is rejected WHOLE when it contains an at-sign that is NOT a
-        // list separator — `@Component` / `user@host` are a decorator and an
-        // email. Trimming the prefix at that at-sign would otherwise inline a
-        // bogus path.
-        let hadInnerAt = false;
         // A token that contains an at-sign (`@Component`, `user@host`) is a
-        // decorator / an email, NOT a file reference. The scan used to stop at
-        // that at-sign and hand the PREFIX (`Component` … no) or, worse, the part
-        // BEFORE it to the inliner. Now the whole token is rejected instead.
+        // decorator or an email, NOT a file reference, and the WHOLE token is
+        // rejected: the scan used to stop at that at-sign and hand the part
+        // BEFORE it to the inliner, which inlined a bogus path.
+        let hadInnerAt = false;
         const isRef = (t) => t.length > 0 && !t.includes('@');
         while (j < n && !isRefEnd(chars[j])) {
             // A COMMA directly followed by another `@` starts the NEXT reference:
@@ -154,12 +150,9 @@ export function extractAtFileRefs(text) {
             seen.add(cleaned);
             out.push(cleaned);
         }
-        // The break above leaves `j` ON the comma; step past it so the next `@`
-        // is seen as the start of a reference. When the scan ended on a
-        // terminator instead, continue AFTER it.
-        // The scan stopped ON a separator that split the token (`,`, `;` or a
-        // second at-sign): resume AT it so the next part is scanned as its own
-        // reference. Continuing past it dropped the second file of a list.
+        // The scan may have stopped ON a separator that split the token (`,`, `;`
+        // or a second at-sign): resume AT it so the next part is scanned as its
+        // own reference. Continuing past it dropped the second file of a list.
         const sep = j < n ? chars[j] : '';
         if (j > i + 1 && (sep === ',' || sep === ';' || sep === '@'))
             i = j;

package/dist/prompt.js

@@ -31,7 +31,8 @@ export async function promptOnce(question) {
     const wasRaw = stdin.isRaw;
     stdin.setRawMode(true);
     stdin.resume();
-    // We enable/disable bracketed paste in pairs.
+    // Bracketed paste is enabled/disabled in pairs, so the terminal is left in
+    // normal mode however the prompt exits.
     stdout.write('\x1b[?2004h');
     stdout.write(question);
     let line = '';
@@ -40,11 +41,11 @@ export async function promptOnce(question) {
     const PASTE_START = '\x1b[200~';
     const PASTE_END = '\x1b[201~';
     const redraw = () => {
-        // Return to the start of the line, erase and print again.
+        // Redraw in place: CR + erase-to-end, then the prompt and the line again.
         stdout.write(String.fromCharCode(13));
         stdout.write('\x1b[K');
         stdout.write(question + line);
-        // Put the cursor in the right position.
+        // Step back to the cursor, measured in UTF-16 units.
         const back = line.length - cursor;
         if (back > 0)
             stdout.write('\x1b[' + back + 'D');