zames_pro 2.82.138 → 2.82.140

package/CHANGELOG.md

@@ -7,6 +7,96 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.140] - 2026-10-25
+
+### Fixed
+
+- **scheduler:** stop the ticker on exit; correct the abort help line
+- **config:** say when a project config overrides the home one
+
+## [2.82.139] - 2026-10-25
+
+### Changed
+
+- docs(test/security-sandbox): drop the backlog priority label
+- docs(test): remove the last backlog ids (I2, U2/U3)
+- docs(test/extra-tools): drop a backlog id from a section header
+- docs(test/cancel-ask): stop quoting a stale watchdog deadline
+- docs(test/send-runtime-block-lift): fix a header that contradicted its own fix
+- docs(test/tui-hints-locale): wrap two over-long comment lines
+- docs(test/tui-hints-locale): wrap the over-long note
+- docs(test): translate leftover Russian comments
+- docs(test/readme-built): say why a second readme is forbidden
+- docs(test/readme-built): say why a second readme is forbidden
+- docs(test/agent-loop): state why the first send is not an agent turn
+- docs(test/statusline-cap): untangle the settle-vs-exit note
+- docs(test/i18n-unused): drop the shouting prefix
+- docs(test/legacy-paste-marker): drop a time-relative word
+- docs(test): replace first-person narration with the subject
+- docs(test/continue-button): drop the first-person narration
+- docs(test/auto-compact): drop a pointer to the fixture value
+- docs(test/run-task): drop the refactor history from the header
+- docs(test/attach-flow-shared): keep only the why of the fake clock
+- docs(test/send-telemetry-nan-block): drop a case that lives in another test
+- docs(test/wsl): state the real reason instead of the CI setup
+- docs(test/agent-loop-robust): name the retry budget constant
+- docs(test/diff-large-file): stop quoting a removed source comment
+- docs(test/auth-login): trim a comment that restated its asserts
+- docs(agents): remove the last backlog ids from the root instructions
+- docs(scripts): remove backlog ids from scenario comments
+- docs(test/generation-incomplete): stop quoting a stale watchdog value
+- docs(test/cancel-ask): drop the runner version from the keep-alive note
+- docs(test/cli-flags): name the skip-list constant
+- docs(test/continue-button): name the real continue constant
+- docs(test/finished-answer-plain-json): name the real constants
+- docs(test/tool-name-resolution): drop the meta clause
+- docs(test/mcp-truncate-surrogate): finish the meta-narration cleanup
+- docs(test): drop meta-narration from test comments
+- docs(test/log-window): state the bug instead of narrating the test
+- docs(readme): mention /rewind next to /undo
+- docs(llms): regenerate llms-full.txt after the readme fixes
+- docs(readme): clarify the per-provider context window sentence
+- docs(readme): the Qwen send pause is 4 s, not 1 s
+- docs(readme): the context percentage is per provider, not always 1M
+- docs(readme): complete the CLI options block
+- docs(readme): list BashOutput and AskUser among the tools
+- docs(readme): make the slash-command list match SLASH_COMMANDS
+- docs(scripts): fix a typo in the build-readme usage line
+- docs(test/agent-loop-robust): fix a section header that contradicted the code
+- docs(test/i18n-unused): tighten the vacuously-green note
+- docs(test/attach-flow): drop a what-comment
+- docs(test/browser-login): drop a duplicated probe walkthrough
+- docs(scripts): document the postinstall contract
+- docs(test/agent-facing-english): point at the split i18n catalog
+- docs(test): remove backlog ids missed by the first sweep
+- docs(developing): refresh module sizes and drop backlog ids
+- docs(agents): drop backlog ids from the module map
+- docs(agents): the providers are three, with three profiles
+- docs(contributing): fix the provider list and the dev-mode description
+- docs(citation): sync the version and keep CITATION.cff updated on release
+- docs(readme): mention GLM in the provider section
+- docs(readme): fix three default/config facts (mouseScroll, telemetry, config write target)
+- docs(readme): state the real Node.js requirement (>= 22)
+- docs(design-notes): replace a backlog id with the actual reason
+- docs(scripts): translate a Russian header and drop backlog ids
+- docs(test/xml): prune and fix stale comments
+- docs(test/subagent): prune stale comments
+- docs(test/ssrf): prune stale comments
+- docs(test/skill): prune and fix stale comments
+- docs(test/mcp): prune stale comments and translate a leftover Russian note
+- docs(test/i18n): repair a corrupted word and prune stale comments
+- docs(test/glm): prune and fix stale comments
+- docs(test/editor): drop remaining backlog ids
+- docs(test/editor): prune and fix stale comments
+- docs(test/context): prune and fix stale comments
+- docs(test/config): prune and fix stale comments
+- docs(test/cli): prune and fix stale comments
+- docs(test/browser): prune and fix stale comments
+- docs(test/backlog): prune and fix stale comments
+- docs(test/answer-parse): prune and fix stale comments
+- docs(test/agent-loop): prune and fix stale comments
+- docs: add a text-audit protocol for an unattended loop run
+
 ## [2.82.138] - 2026-10-25
 
 ### Changed

package/README.md

@@ -13,7 +13,7 @@
   <a href="https://www.npmjs.com/package/zames_pro"><img src="https://img.shields.io/npm/dm/zames_pro.svg" alt="npm downloads"></a>
   <a href="https://github.com/Viqto0r/zames_pro/actions/workflows/test.yml"><img src="https://github.com/Viqto0r/zames_pro/actions/workflows/test.yml/badge.svg" alt="tests"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
-  <a href="package.json"><img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen.svg" alt="Node.js"></a>
+  <a href="package.json"><img src="https://img.shields.io/badge/node-%3E%3D22-brightgreen.svg" alt="Node.js"></a>
   <a href="https://www.typescriptlang.org/"><img src="https://img.shields.io/badge/TypeScript-strict-3178c6.svg" alt="TypeScript"></a>
   <a href="CONTRIBUTING.md"><img src="https://img.shields.io/badge/PRs-welcome-brightgreen.svg" alt="PRs welcome"></a>
 </p>
@@ -96,8 +96,8 @@ Key pieces:
 - **A persistent per-provider profile** (`~/.zames/profile` for DeepSeek,
   `~/.zames/qwen-profile` for Qwen) keeps you signed in; the headless
   User-Agent is patched so the site's CDN does not 403 the login.
-- **A send throttle** (15 s on DeepSeek, ~1 s on Qwen, which tolerates rapid
-  sends; GLM uses an adaptive pause that starts at 0) keeps the web chat's rate
+- **A send throttle** (15 s on DeepSeek, 4 s on Qwen, which tolerates a faster
+  pace; GLM uses an adaptive pause that starts at 0) keeps the web chat's rate
   limit happy during long tool-heavy runs.
 - **The agent is sandboxed** to the directory it was started in — no tool can
   read or write above it.
@@ -115,7 +115,8 @@ Key pieces:
 
 - **Tools like Claude Code / Codex** — `Read`, `Write`, `Edit`, `Bash`,
   `Glob`, `Grep`, plus `MultiEdit`, `ApplyPatch`, `LS`, `TodoWrite`, git and web
-  tools. Every edit is backed by `/undo`.
+  tools. Every edit is backed by `/undo`, and `/rewind` restores the whole
+  working tree from a checkpoint.
 - **Runs while you keep typing** — queue messages during a task; they run right
   after it, in the same chat (like typing during generation on the web).
 - **Plan mode** — `/plan` (or `--plan`) drops all mutating tools, so the agent
@@ -148,7 +149,7 @@ Key pieces:
 
 ## Requirements
 
-- Node.js >= 20
+- Node.js >= 22
 - An account on the chat you want to use — **DeepSeek** (`chat.deepseek.com`,
   the default), **Qwen** (`chat.qwen.ai`) or **GLM** (`chat.z.ai`). Qwen also
   works in guest mode for a few messages. On first launch zames asks for your login in the terminal
@@ -194,8 +195,8 @@ Credentials and toggles can also be edited from `/config`
 
 ## Switching providers (DeepSeek / Qwen / GLM)
 
-zames can drive either **DeepSeek** (`chat.deepseek.com`, the default) or
-**Qwen** (`chat.qwen.ai`):
+zames can drive **DeepSeek** (`chat.deepseek.com`, the default), **Qwen**
+(`chat.qwen.ai`) or **GLM** (`chat.z.ai`):
 
 ```bash
 /provider qwen      # switch to Qwen (persisted) — applied live, no restart
@@ -209,9 +210,10 @@ zames can drive either **DeepSeek** (`chat.deepseek.com`, the default) or
 Notes:
 
 - The switch is **live**: zames closes the current backend and opens the other
-  one in place, so no restart is needed. The two backends use **separate
+  one in place, so no restart is needed. The backends use **separate
   persistent profiles** (`~/.zames/profile` for DeepSeek, `~/.zames/qwen-profile`
-  for Qwen), so switching never signs the other one out.
+  for Qwen, `~/.zames/glm-profile` for GLM), so switching never signs the other
+  one out.
 - A chat id belongs to ONE backend, so the new provider opens a **fresh chat**.
   If the previous chat had messages they are summarized and posted as a
   handoff with the next task; an empty chat is switched silently.
@@ -230,10 +232,10 @@ Notes:
   solved programmatically). zames therefore launches GLM headed by default and
   prints a note about it; `--headless` still forces headless (sends will hit
   the captcha). `--headed` is accepted everywhere.
-- **Send telemetry**: every send is recorded in
+- **Send telemetry** (off by default): when enabled, every send is recorded in
   `~/.zames/logs/sends-<provider>.jsonl` (timing, mode flags, the outcome and
-  the server error — never the prompt or the answer). Turn it off with
-  `/config set browser.sendTelemetry false`. `/limits` shows the recent sends
+  the server error — never the prompt or the answer). Turn it on with
+  `/config set browser.sendTelemetry true`. `/limits` shows the recent sends
   and the current pause. GLM additionally uses an **adaptive pause**: it starts
   at 0 and backs off from a REAL rate limit.
 - **Warning**: automating a web chat may violate the service's terms of use and
@@ -295,11 +297,11 @@ The prompt is a small line editor with persistent history:
 Full-screen mode adds dialog navigation, so a long answer can be read and
 selected without leaving the terminal:
 
-- `ui.mouseScroll=false` (default) — the terminal owns the mouse: normal text
-  selection works and the wheel is inert (it never scrolls the input history —
-  history is arrow keys only).
-- `ui.mouseScroll=true` — the app consumes the wheel and scrolls the dialog;
-  selecting text then needs `Shift`+click (the TUI convention).
+- `ui.mouseScroll=true` (default) — the app consumes the wheel and scrolls the
+  dialog; selecting text then needs `Shift`+click (the TUI convention). The
+  wheel never scrolls the input history — history is arrow keys only.
+- `ui.mouseScroll=false` — the terminal owns the mouse again: normal text
+  selection works and the wheel is inert.
 - `PgUp` / `PgDn` — move up/down the dialog half a screen.
 - `Home` / `End` — jump to the very top / bottom of the dialog (only while the
   input line is empty; with text typed they move the caret as usual).
@@ -336,8 +338,11 @@ instead of staying silent.
 zames --task <task text>
 zames --chat <id>
 zames --new-chat
+zames --resume-last
 zames --resend-prompt
 zames --dir <path>
+zames --provider <deepseek|qwen|glm>
+zames --max-iter <n>
 zames --headless
 zames --headed
 zames --plan
@@ -368,15 +373,19 @@ zames --task "..." --output-format jsonl \
 
 The agent has the same style of tools as Claude Code / Codex CLI:
 
-- **File tools** — `Read`, `Write`, `Edit`, `Bash`, `Glob`, `Grep`. `Read`
-  returns raw content by default; pass `numbered=true` to get `cat -n`-style
-  line numbers (for reference only — do not paste them into `Edit`).
+- **File tools** — `Read`, `Write`, `Edit`, `Bash`, `BashOutput`, `Glob`,
+  `Grep`. `Read` returns raw content by default; pass `numbered=true` to get
+  `cat -n`-style line numbers (for reference only — do not paste them into
+  `Edit`). `Bash` takes `run_in_background`; `BashOutput` then polls or kills
+  that process.
 - **Extra tools** — `LS` (list a directory), `MultiEdit` (several edits to one
   file applied atomically), `TodoWrite` (session task checklist), `ApplyPatch`
   (multi-file patch in Codex's V4A format: `*** Begin Patch` … `*** End Patch`).
 - **Git** — `GitStatus`, `GitDiff`, `GitLog`, `GitShow`, `GitBranchList`,
   `GitAdd`, `GitCommit`, `GitPush`.
 - **Web** — `WebFetch`, `WebSearch`.
+- **Operator** — `AskUser` (a modal question with options; skipped in plan
+  mode so a plan is never interrupted).
 - **Service** — `respond` (final answer to the operator, ends the task).
 
 All file tools stay inside the working directory (sandbox). `Write`/`Edit` and
@@ -384,11 +393,12 @@ All file tools stay inside the working directory (sandbox). `Write`/`Edit` and
 
 ## Slash commands
 
-Type / in the prompt for hints (Tab completes). Besides the session and
-config commands (/new, /chats, /resume, /cd, /status, /config,
-/undo, /transcript, /mcp, /skills, /memory, /init, /reload,
-/debug-dom, /help, /exit) there are a few that mirror Claude Code /
-Codex CLI:
+Type / in the prompt for hints (Tab completes) — that list is always complete,
+`/help <command>` describes any single one. Besides the session and config
+commands (/new or /clear, /sessions, /chats, /resume-id, /last, /chat, /cd,
+/pwd, /status, /config, /undo, /undo-list, /rewind, /rewind-list, /transcript,
+/tasks, /mcp, /skills, /memory, /remember, /init, /reload, /debug-dom, /help,
+/exit) there are a few that mirror Claude Code / Codex CLI:
 
 - /diff [--staged] — show the working-tree git diff (--staged for the index).
 - /diffstat — a one-line change summary (`git diff --stat`).
@@ -450,11 +460,12 @@ tests`). /cron "<min> <hour> <dom> <month> <dow>" <task> — run on a schedule.
   current task.
 
 The token context is also shown live: the status line above the input has the
-spinner/text on the left and the context on the right (e.g. `125k · 13%`,
-percent of a 1M context). It is COLORED by fill level: green below 50%,
-yellow 50-80%, red above 80%. It comes from the provider's own token
-counter (DeepSeek's `accumulated_token_usage`, Qwen's `input_tokens`, GLM's
-`prompt_tokens`) and is
+spinner/text on the left and the context on the right (e.g. `125k · 13%`). The
+percentage is of the ACTIVE provider's window — 1M for DeepSeek, a per-model
+value for Qwen and GLM (`qwen.contextLimit` / `glm.contextLimit`) — and it is
+COLORED by fill level: green below 50%, yellow 50-80%, red above 80%.
+It comes from the provider's own token counter (DeepSeek's
+`accumulated_token_usage`, Qwen's `input_tokens`, GLM's `prompt_tokens`) and is
 hidden until the first answer delivers it.
 
 ## Project context, skills and memory
@@ -587,8 +598,9 @@ Examples:
 /config lang en
 ```
 
-Changes are written to the project `.zamesrc.json` and applied right away
-(where possible without a restart).
+Changes are written to the HOME config (`~/.zames/config.json`), NOT to the
+project `.zamesrc.json` — a personal toggle must not leak into git — and applied
+right away (where possible without a restart).
 
 ### Language
 
@@ -645,7 +657,7 @@ signed-in browser profile.
 **How do I install a terminal AI coding agent?**
 
 ```bash
-npm install -g zames_pro   # Node.js >= 20; Chromium is fetched automatically
+npm install -g zames_pro   # Node.js >= 22; Chromium is fetched automatically
 cd your-project
 zames
 ```
@@ -777,9 +789,9 @@ zames не вызывает API модели. Он запускает headless C
   `~/.zames/qwen-profile` у Qwen, `~/.zames/glm-profile` у GLM) держит вас
   залогиненным; User-Agent
   headless-браузера подменяется, чтобы CDN сайта не отдавал 403 на вход.
-- **Троттлинг отправки** (15 с у DeepSeek, ~1 с у Qwen, который спокойно
-  переносит частые отправки; у GLM — адаптивная пауза с нуля) щадит рейт-лимит
-  веб-чата во время долгих прогонов с инструментами.
+- **Троттлинг отправки** (15 с у DeepSeek, 4 с у Qwen, который спокойно
+  переносит более частый темп; у GLM — адаптивная пауза с нуля) щадит
+  рейт-лимит веб-чата во время долгих прогонов с инструментами.
 - **Агент запесочен** в директорию запуска — ни один инструмент не может
   читать или писать выше неё.
 
@@ -796,7 +808,8 @@ zames не вызывает API модели. Он запускает headless C
 
 - **Инструменты как в Claude Code / Codex** — `Read`, `Write`, `Edit`, `Bash`,
   `Glob`, `Grep`, плюс `MultiEdit`, `ApplyPatch`, `LS`, `TodoWrite`, git- и
-  веб-инструменты. Каждая правка подкреплена `/undo`.
+  веб-инструменты. Каждая правка подкреплена `/undo`, а `/rewind` возвращает
+  всё рабочее дерево к чекпойнту.
 - **Работает, пока вы печатаете** — сообщения, набранные во время задачи,
   встают в очередь и уходят сразу после неё, в тот же чат (как набор текста
   во время генерации на сайте).
@@ -832,7 +845,7 @@ zames не вызывает API модели. Он запускает headless C
 
 ## Требования
 
-- Node.js >= 20
+- Node.js >= 22
 - Аккаунт в нужном чате — **DeepSeek** (`chat.deepseek.com`, по умолчанию),
   **Qwen** (`chat.qwen.ai`) или **GLM** (`chat.z.ai`). Qwen также работает в
   гостевом режиме на несколько сообщений. При первом запуске zames спросит логин в терминале (и сохранит его
@@ -911,10 +924,10 @@ zames умеет работать с **DeepSeek** (`chat.deepseek.com`, по у
   программно её не пройти). Поэтому zames запускает GLM с окном по умолчанию и
   пишет об этом при старте; `--headless` по-прежнему форсирует headless
   (отправки будут упираться в капчу). `--headed` работает везде.
-- **Телеметрия отправок**: каждая отправка пишется в
-  `~/.zames/logs/sends-<provider>.jsonl` (тайминги, флаги режимов, исход и
-  ошибка сервера — без промптов и ответов). Отключается через
-  `/config set browser.sendTelemetry false`. Команда `/limits` показывает
+- **Телеметрия отправок** (по умолчанию выключена): когда включена, каждая
+  отправка пишется в `~/.zames/logs/sends-<provider>.jsonl` (тайминги, флаги
+  режимов, исход и ошибка сервера — без промптов и ответов). Включается через
+  `/config set browser.sendTelemetry true`. Команда `/limits` показывает
   последние отправки и текущую паузу. У GLM вдобавок **адаптивная пауза**: она
   начинается с 0 и растёт только после НАСТОЯЩЕГО лимита.
 - **Предупреждение**: автоматизация веб-чата может нарушать условия
@@ -978,11 +991,11 @@ zames
 В полноэкранном режиме добавляется навигация по диалогу, чтобы длинный ответ
 можно было прочитать и выделить не покидая терминал:
 
-- `ui.mouseScroll=false` (по умолчанию) — терминал владеет мышью: обычное
-  выделение текста работает, колесо инертно (и никогда не листает историю
-  ввода — история только стрелками).
-- `ui.mouseScroll=true` — приложение перехватывает колесо и скроллит диалог;
-  выделение текста тогда — `Shift`+клик (стандарт TUI).
+- `ui.mouseScroll=true` (по умолчанию) — приложение перехватывает колесо и
+  скроллит диалог; выделение текста тогда — `Shift`+клик (стандарт TUI). Колесо
+  никогда не листает историю ввода — история только стрелками.
+- `ui.mouseScroll=false` — мышью снова владеет терминал: обычное выделение
+  текста работает, колесо инертно.
 - `PgUp` / `PgDn` — вверх/вниз по диалогу на пол-экрана.
 - `Home` / `End` — прыжок в самый верх / низ диалога (только когда строка ввода
   пуста; при набранном тексте они двигают курсор, как обычно).
@@ -1020,8 +1033,11 @@ base64-блок с узнаваемой сигнатурой изображен
 zames --task <текст задачи>
 zames --chat <id>
 zames --new-chat
+zames --resume-last
 zames --resend-prompt
 zames --dir <path>
+zames --provider <deepseek|qwen|glm>
+zames --max-iter <n>
 zames --headless
 zames --headed
 zames --plan
@@ -1052,16 +1068,19 @@ zames --task "..." --output-format jsonl \
 
 У агента тот же стиль инструментов, что в Claude Code / Codex CLI:
 
-- **Файловые** — `Read`, `Write`, `Edit`, `Bash`, `Glob`, `Grep`. `Read` по
-  умолчанию отдаёт сырое содержимое; передайте `numbered=true`, чтобы получить
-  нумерацию строк в стиле `cat -n` (только для справки — не вставляйте её в
-  `Edit`).
+- **Файловые** — `Read`, `Write`, `Edit`, `Bash`, `BashOutput`, `Glob`,
+  `Grep`. `Read` по умолчанию отдаёт сырое содержимое; передайте
+  `numbered=true`, чтобы получить нумерацию строк в стиле `cat -n` (только для
+  справки — не вставляйте её в `Edit`). `Bash` принимает `run_in_background`,
+  а `BashOutput` затем опрашивает или убивает этот процесс.
 - **Дополнительные** — `LS` (список директории), `MultiEdit` (несколько правок
   одного файла атомарно), `TodoWrite` (чек-лист задач сессии), `ApplyPatch`
   (мультифайловый патч в формате V4A от Codex: `*** Begin Patch` … `*** End Patch`).
 - **Git** — `GitStatus`, `GitDiff`, `GitLog`, `GitShow`, `GitBranchList`,
   `GitAdd`, `GitCommit`, `GitPush`.
 - **Web** — `WebFetch`, `WebSearch`.
+- **Оператор** — `AskUser` (модальный вопрос с вариантами; в режиме плана не
+  предлагается, чтобы не прерывать план).
 - **Служебный** — `respond` (финальный ответ оператору, завершает задачу).
 
 Все файловые инструменты остаются внутри рабочей директории (песочница).
@@ -1070,10 +1089,12 @@ zames --task "..." --output-format jsonl \
 
 ## Слэш-команды
 
-Введите / в промпте для подсказок (Tab дополняет). Кроме команд сессии и
-конфига (/new, /chats, /resume, /cd, /status, /config, /undo, /transcript,
-/mcp, /skills, /memory, /init, /reload, /debug-dom, /help, /exit) есть
-несколько в духе Claude Code / Codex CLI:
+Введите / в промпте для подсказок (Tab дополняет) — этот список всегда полный,
+а `/help <команда>` описывает любую одну из них. Кроме команд сессии и конфига
+(/new или /clear, /sessions, /chats, /resume-id, /last, /chat, /cd, /pwd,
+/status, /config, /undo, /undo-list, /rewind, /rewind-list, /transcript,
+/tasks, /mcp, /skills, /memory, /remember, /init, /reload, /debug-dom, /help,
+/exit) есть несколько в духе Claude Code / Codex CLI:
 
 - /diff [--staged] — показать git-диф рабочего дерева (--staged для индекса).
 - /diffstat — сводка изменений одной строкой (`git diff --stat`).
@@ -1136,11 +1157,12 @@ zames --task "..." --output-format jsonl \
   текущей задачи.
 
 Контекст в токенах показывается и вживую: в строке статуса над вводом слева
-спиннер/текст, справа — контекст (например, `125k · 13%`, процент от 1M
-контекста). Он ОКРАШЕН по уровню заполнения: зелёный ниже 50%, жёлтый 50-80%,
-красный выше 80%. Значение приходит из счётчика токенов провайдера (у DeepSeek —
-`accumulated_token_usage`, у Qwen — `input_tokens`, у GLM — `prompt_tokens`) и
-скрыто до первого ответа.
+спиннер/текст, справа — контекст (например, `125k · 13%`). Процент считается от
+окна АКТИВНОГО провайдера — 1M у DeepSeek, у Qwen и GLM — своё значение на
+модель (`qwen.contextLimit` / `glm.contextLimit`). Он ОКРАШЕН по уровню
+заполнения: зелёный ниже 50%, жёлтый 50-80%, красный выше 80%. Значение
+приходит из счётчика токенов провайдера (у DeepSeek — `accumulated_token_usage`,
+у Qwen — `input_tokens`, у GLM — `prompt_tokens`) и скрыто до первого ответа.
 
 ## Контекст проекта, навыки и память
 
@@ -1272,8 +1294,9 @@ enum переключаются на месте; числа и строки от
 /config lang en
 ```
 
-Изменения пишутся в проектный `.zamesrc.json` и применяются сразу (где это
-возможно без перезапуска).
+Изменения пишутся в домашний конфиг (`~/.zames/config.json`), а НЕ в проектный
+`.zamesrc.json` — личный переключатель не должен попадать в git, — и применяются
+сразу (где это возможно без перезапуска).
 
 ### Язык
 
@@ -1332,7 +1355,7 @@ reasoning-модель при включённом «Deep thinking»). В Qwen
 **Как установить терминальный AI coding-агент?**
 
 ```bash
-npm install -g zames_pro   # Node.js >= 20; Chromium скачается автоматически
+npm install -g zames_pro   # Node.js >= 22; Chromium скачается автоматически
 cd your-project
 zames
 ```

package/dist/config-command.js

@@ -15,8 +15,22 @@ import { configGetValue, configValueHint } from './config-commands.js';
  * blindly from the main loop and from the live mid-run interception.
  */
 export async function handleConfigCommand(input, deps) {
-    const { t, print, printErr, getValue, setValue, resetField, showList, openMenu, currentLocale, normalizeLocale, localeDisplayName, homeConfigPath, projectConfigPath, } = deps;
+    const { t, print, printErr, getValue, setValue, resetField, showList, openMenu, currentLocale, normalizeLocale, localeDisplayName, homeConfigPath, projectConfigPath, shadowedKeys, } = deps;
     const schema = deps.schema;
+    // A HOME write is not always the value the next launch reads: the project
+    // `.zamesrc.json` is merged last, so a key present in both wins from the
+    // project file. Without this line the operator saw "saved" and then the OLD
+    // value after a restart (the stale `ui.locale: en` bug).
+    const warnShadowed = (key) => {
+        if (!shadowedKeys)
+            return;
+        if (!shadowedKeys().includes(key))
+            return;
+        printErr(theme.warn(t('cfg.shadowed', {
+            file: projectConfigPath,
+            keys: key,
+        })));
+    };
     // Accept BOTH spellings: the main loop passes the whole typed line
     // (`/config get ui.locale`), while tests and other callers pass the text
     // after the command (`get ui.locale`). Reading parts[1] blindly made the
@@ -60,6 +74,7 @@ export async function handleConfigCommand(input, deps) {
             return;
         }
         print(theme.assistant(t('cfg.lang_set', { v: localeDisplayName(loc) })));
+        warnShadowed('ui.locale');
         return;
     }
     if (sub === 'get') {
@@ -105,6 +120,7 @@ export async function handleConfigCommand(input, deps) {
             value: configGetValue(key, getValue(key), t),
             file: homeConfigPath,
         })));
+        warnShadowed(key);
         return;
     }
     if (sub === 'reset' || sub === 'unset') {

package/dist/config.js

@@ -165,19 +165,72 @@ export const DEFAULTS = {
 };
 export function loadConfig() {
     const merged = JSON.parse(JSON.stringify(DEFAULTS));
-    for (const file of [HOME_CONFIG, projectConfigPath()]) {
-        try {
-            const data = JSON.parse(fs.readFileSync(file, 'utf-8'));
-            deepMerge(merged, data);
-        }
-        catch (e) {
-            const err = e;
-            if (err.code !== 'ENOENT') {
-                console.error(`config: failed to read ${file}: ${err.message}`);
+    // Keys the PROJECT file overrides in the HOME file. Kept so the editor can
+    // say "your change was saved but the project file still wins" — a live
+    // symptom was `/config lang ru` answering "saved", then English after a
+    // restart, because a stale project `.zamesrc.json` pinned `ui.locale: en`.
+    shadowedKeys = [];
+    const homeData = readConfigObject(HOME_CONFIG);
+    const projectData = readConfigObject(projectConfigPath());
+    if (projectData) {
+        shadowedKeys = overriddenKeys(homeData, projectData);
+    }
+    for (const data of [homeData, projectData]) {
+        if (!data)
+            continue;
+        deepMerge(merged, data);
+    }
+    return merged;
+}
+/** Keys the lower-priority file also sets, from the last loadConfig(). */
+let shadowedKeys = [];
+export function shadowedConfigKeys() {
+    return shadowedKeys.slice();
+}
+/**
+ * Every leaf path ("ui.locale", "browser.auth.username") present in BOTH
+ * objects — i.e. a value the PROJECT config overrides over the HOME one.
+ * PURE so the precedence puzzle can be tested without touching the disk.
+ */
+export function overriddenKeys(lower, higher) {
+    if (!lower || !higher)
+        return [];
+    const out = [];
+    const walk = (a, b, prefix) => {
+        for (const key of Object.keys(b)) {
+            if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+                continue;
+            }
+            const path2 = prefix ? prefix + '.' + key : key;
+            const av = a[key];
+            const bv = b[key];
+            if (isPlainObject(av) && isPlainObject(bv)) {
+                walk(av, bv, path2);
+            }
+            else if (av !== undefined && !isPlainObject(bv)) {
+                out.push(path2);
             }
         }
+    };
+    walk(lower, higher, '');
+    return out.sort();
+}
+function isPlainObject(v) {
+    return !!v && typeof v === 'object' && !Array.isArray(v);
+}
+/** Parse one config file; null when it is missing or unreadable. */
+function readConfigObject(file) {
+    try {
+        const data = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        return isPlainObject(data) ? data : null;
+    }
+    catch (e) {
+        const err = e;
+        if (err.code !== 'ENOENT') {
+            console.error(`config: failed to read ${file}: ${err.message}`);
+        }
+        return null;
     }
-    return merged;
 }
 // The agent-loop watchdog deadline per provider. The loop default (240s) is
 // tuned for DeepSeek; a Qwen GUEST turn regularly takes 7-8 minutes (cold

package/dist/i18n/config.js

@@ -251,6 +251,13 @@ export const configMessages = {
         ru: 'Язык переключён на {v}.',
         en: 'Language switched to {v}.',
     },
+    // The project `.zamesrc.json` is merged AFTER the home config, so a key it
+    // also sets silently wins — the operator sees "saved", then the old value
+    // after a restart (a stale `ui.locale: en` looked like a lost setting).
+    'cfg.shadowed': {
+        ru: '⚠ Проектный конфиг {file} переопределяет: {keys} — после перезапуска будет его значение. Уберите эти ключи из проектного файла.',
+        en: '⚠ The project config {file} overrides: {keys} — after a restart its value wins. Remove these keys from the project file.',
+    },
     'cfg.lang_usage': {
         ru: 'Использование: /config lang <ru|en>',
         en: 'Usage: /config lang <ru|en>',

package/dist/i18n/help.js

@@ -94,8 +94,8 @@ export const helpMessages = {
         en: 'Ctrl+Shift+V image         paste an image/file (saved to tmp)',
     },
     'help.key.esc': {
-        ru: 'Esc, Ctrl+C              прервать текущую генерацию',
-        en: 'Esc, Ctrl+C               abort current generation',
+        ru: 'Esc, Ctrl+C              Esc — прервать генерацию; Ctrl+C — прервать инструмент, второй раз — весь прогон',
+        en: 'Esc, Ctrl+C               Esc — abort generation; Ctrl+C — abort the tool, twice — the whole run',
     },
     'help.key.scroll': {
         ru: 'PgUp / PgDn              вверх/вниз по диалогу (Home/End — в начало/конец) [full-screen]',

package/dist/index.js

@@ -20,7 +20,7 @@ import { LineEditor } from './input.js';
 import { TuiEditor } from './tui/TuiEditor.js';
 import { promptOnce } from './prompt.js';
 import { parseImagePaste, extForMime, saveToTemp, guessMime, formatSize, readClipboardImageDetailed, sniffMime, readWindowsClipboardFiles, hasClipboardTool, writeClipboardText, contentHash, } from './attachments.js';
-import { loadConfig, DEFAULTS, CONFIG_PATHS, ZAMES_HOME, CONFIG_SCHEMA, getByPath, validateConfigValue, writeConfigValue, resetConfigValue, providerAskDeadlineMs, } from './config.js';
+import { loadConfig, DEFAULTS, CONFIG_PATHS, ZAMES_HOME, CONFIG_SCHEMA, getByPath, validateConfigValue, writeConfigValue, resetConfigValue, providerAskDeadlineMs, shadowedConfigKeys, } from './config.js';
 import { runConfigMenu } from './config-menu.js';
 import { runConfigMenuInk } from './tui/run-config-menu.js';
 import { formatConfigList } from './config-commands.js';
@@ -126,6 +126,17 @@ let currentLocale = isLocale(config.ui?.locale)
 // Translation: reads currentLocale at call time, so a language change takes
 // effect immediately, without a restart (for lines printed afterwards).
 const t = (key, params) => translate(currentLocale)(key, params);
+// A project `.zamesrc.json` wins over the HOME config, so a key it ALSO sets
+// silently defeats `/config set` — the value looks saved and comes back stale
+// after a restart (the reported "language resets to English" case). Say it at
+// startup, before a task, instead of letting the operator hunt for it.
+const shadowedAtStartup = shadowedConfigKeys();
+if (shadowedAtStartup.length) {
+    console.error(theme.warn(t('cfg.shadowed', {
+        file: CONFIG_PATHS.PROJECT_CONFIG,
+        keys: shadowedAtStartup.join(', '),
+    })));
+}
 // Headless is the default. --headed forces a visible window (useful for the
 // first sign-in or debugging the DOM). --headless keeps it explicit.
 // DeepSeek/Qwen run headless by default; GLM CANNOT: z.ai answers a headless
@@ -1349,10 +1360,23 @@ async function main() {
     // never bypassing the send throttle). Started lazily on the first job.
     const scheduler = new Scheduler();
     let scheduleTimer = null;
+    // Ctrl+C on an idle agent EXITS the process. Without this latch a /loop job
+    // whose task was interrupted (and every later fire) would be dropped into
+    // the queue while nobody waits for it, and each tick printed "fired" into a
+    // dying terminal. A loop is meant to outlive a single task, not the agent.
+    let shuttingDown = false;
+    const stopScheduleTicker = () => {
+        if (scheduleTimer) {
+            clearInterval(scheduleTimer);
+            scheduleTimer = null;
+        }
+    };
     const startScheduleTicker = () => {
         if (scheduleTimer)
             return;
         scheduleTimer = setInterval(() => {
+            if (shuttingDown)
+                return;
             const due = scheduler.due(Date.now());
             for (const job of due) {
                 // Do not pile MANY copies of the same job while the agent is busy: if
@@ -1403,6 +1427,8 @@ async function main() {
     let reviewMode = null;
     process.on('SIGINT', async () => {
         running = false;
+        shuttingDown = true;
+        stopScheduleTicker();
         // Kill any background processes so no dev-server outlives the agent.
         killAllBackground();
         await browser.close().catch(() => { });
@@ -1827,8 +1853,12 @@ async function main() {
                 lastCtrlCAt = now;
             }
             else {
-                // Not busy — exit. We wake takeInput() so the loop finishes.
+                // Not busy — exit. We wake takeInput() so the loop finishes. The
+                // scheduler must stop too: a live /loop ticker keeps firing into the
+                // queue while the process is shutting down.
                 running = false;
+                shuttingDown = true;
+                stopScheduleTicker();
                 if (waiter) {
                     const r = waiter;
                     waiter = null;
@@ -2160,6 +2190,7 @@ async function main() {
             schema: CONFIG_SCHEMA,
             homeConfigPath: CONFIG_PATHS.HOME_CONFIG,
             projectConfigPath: CONFIG_PATHS.PROJECT_CONFIG,
+            shadowedKeys: shadowedConfigKeys,
         });
     }
     // Open a chat by its ChatInfo and print the restored dialogue. Shared by

package/llms-full.txt

@@ -80,8 +80,8 @@ Key pieces:
 - **A persistent per-provider profile** (`~/.zames/profile` for DeepSeek,
   `~/.zames/qwen-profile` for Qwen) keeps you signed in; the headless
   User-Agent is patched so the site's CDN does not 403 the login.
-- **A send throttle** (15 s on DeepSeek, ~1 s on Qwen, which tolerates rapid
-  sends; GLM uses an adaptive pause that starts at 0) keeps the web chat's rate
+- **A send throttle** (15 s on DeepSeek, 4 s on Qwen, which tolerates a faster
+  pace; GLM uses an adaptive pause that starts at 0) keeps the web chat's rate
   limit happy during long tool-heavy runs.
 - **The agent is sandboxed** to the directory it was started in — no tool can
   read or write above it.
@@ -99,7 +99,8 @@ Key pieces:
 
 - **Tools like Claude Code / Codex** — `Read`, `Write`, `Edit`, `Bash`,
   `Glob`, `Grep`, plus `MultiEdit`, `ApplyPatch`, `LS`, `TodoWrite`, git and web
-  tools. Every edit is backed by `/undo`.
+  tools. Every edit is backed by `/undo`, and `/rewind` restores the whole
+  working tree from a checkpoint.
 - **Runs while you keep typing** — queue messages during a task; they run right
   after it, in the same chat (like typing during generation on the web).
 - **Plan mode** — `/plan` (or `--plan`) drops all mutating tools, so the agent
@@ -132,7 +133,7 @@ Key pieces:
 
 ## Requirements
 
-- Node.js >= 20
+- Node.js >= 22
 - An account on the chat you want to use — **DeepSeek** (`chat.deepseek.com`,
   the default), **Qwen** (`chat.qwen.ai`) or **GLM** (`chat.z.ai`). Qwen also
   works in guest mode for a few messages. On first launch zames asks for your login in the terminal
@@ -178,8 +179,8 @@ Credentials and toggles can also be edited from `/config`
 
 ## Switching providers (DeepSeek / Qwen / GLM)
 
-zames can drive either **DeepSeek** (`chat.deepseek.com`, the default) or
-**Qwen** (`chat.qwen.ai`):
+zames can drive **DeepSeek** (`chat.deepseek.com`, the default), **Qwen**
+(`chat.qwen.ai`) or **GLM** (`chat.z.ai`):
 
 ```bash
 /provider qwen      # switch to Qwen (persisted) — applied live, no restart
@@ -193,9 +194,10 @@ zames can drive either **DeepSeek** (`chat.deepseek.com`, the default) or
 Notes:
 
 - The switch is **live**: zames closes the current backend and opens the other
-  one in place, so no restart is needed. The two backends use **separate
+  one in place, so no restart is needed. The backends use **separate
   persistent profiles** (`~/.zames/profile` for DeepSeek, `~/.zames/qwen-profile`
-  for Qwen), so switching never signs the other one out.
+  for Qwen, `~/.zames/glm-profile` for GLM), so switching never signs the other
+  one out.
 - A chat id belongs to ONE backend, so the new provider opens a **fresh chat**.
   If the previous chat had messages they are summarized and posted as a
   handoff with the next task; an empty chat is switched silently.
@@ -214,10 +216,10 @@ Notes:
   solved programmatically). zames therefore launches GLM headed by default and
   prints a note about it; `--headless` still forces headless (sends will hit
   the captcha). `--headed` is accepted everywhere.
-- **Send telemetry**: every send is recorded in
+- **Send telemetry** (off by default): when enabled, every send is recorded in
   `~/.zames/logs/sends-<provider>.jsonl` (timing, mode flags, the outcome and
-  the server error — never the prompt or the answer). Turn it off with
-  `/config set browser.sendTelemetry false`. `/limits` shows the recent sends
+  the server error — never the prompt or the answer). Turn it on with
+  `/config set browser.sendTelemetry true`. `/limits` shows the recent sends
   and the current pause. GLM additionally uses an **adaptive pause**: it starts
   at 0 and backs off from a REAL rate limit.
 - **Warning**: automating a web chat may violate the service's terms of use and
@@ -279,11 +281,11 @@ The prompt is a small line editor with persistent history:
 Full-screen mode adds dialog navigation, so a long answer can be read and
 selected without leaving the terminal:
 
-- `ui.mouseScroll=false` (default) — the terminal owns the mouse: normal text
-  selection works and the wheel is inert (it never scrolls the input history —
-  history is arrow keys only).
-- `ui.mouseScroll=true` — the app consumes the wheel and scrolls the dialog;
-  selecting text then needs `Shift`+click (the TUI convention).
+- `ui.mouseScroll=true` (default) — the app consumes the wheel and scrolls the
+  dialog; selecting text then needs `Shift`+click (the TUI convention). The
+  wheel never scrolls the input history — history is arrow keys only.
+- `ui.mouseScroll=false` — the terminal owns the mouse again: normal text
+  selection works and the wheel is inert.
 - `PgUp` / `PgDn` — move up/down the dialog half a screen.
 - `Home` / `End` — jump to the very top / bottom of the dialog (only while the
   input line is empty; with text typed they move the caret as usual).
@@ -320,8 +322,11 @@ instead of staying silent.
 zames --task <task text>
 zames --chat <id>
 zames --new-chat
+zames --resume-last
 zames --resend-prompt
 zames --dir <path>
+zames --provider <deepseek|qwen|glm>
+zames --max-iter <n>
 zames --headless
 zames --headed
 zames --plan
@@ -352,15 +357,19 @@ zames --task "..." --output-format jsonl \
 
 The agent has the same style of tools as Claude Code / Codex CLI:
 
-- **File tools** — `Read`, `Write`, `Edit`, `Bash`, `Glob`, `Grep`. `Read`
-  returns raw content by default; pass `numbered=true` to get `cat -n`-style
-  line numbers (for reference only — do not paste them into `Edit`).
+- **File tools** — `Read`, `Write`, `Edit`, `Bash`, `BashOutput`, `Glob`,
+  `Grep`. `Read` returns raw content by default; pass `numbered=true` to get
+  `cat -n`-style line numbers (for reference only — do not paste them into
+  `Edit`). `Bash` takes `run_in_background`; `BashOutput` then polls or kills
+  that process.
 - **Extra tools** — `LS` (list a directory), `MultiEdit` (several edits to one
   file applied atomically), `TodoWrite` (session task checklist), `ApplyPatch`
   (multi-file patch in Codex's V4A format: `*** Begin Patch` … `*** End Patch`).
 - **Git** — `GitStatus`, `GitDiff`, `GitLog`, `GitShow`, `GitBranchList`,
   `GitAdd`, `GitCommit`, `GitPush`.
 - **Web** — `WebFetch`, `WebSearch`.
+- **Operator** — `AskUser` (a modal question with options; skipped in plan
+  mode so a plan is never interrupted).
 - **Service** — `respond` (final answer to the operator, ends the task).
 
 All file tools stay inside the working directory (sandbox). `Write`/`Edit` and
@@ -368,11 +377,12 @@ All file tools stay inside the working directory (sandbox). `Write`/`Edit` and
 
 ## Slash commands
 
-Type / in the prompt for hints (Tab completes). Besides the session and
-config commands (/new, /chats, /resume, /cd, /status, /config,
-/undo, /transcript, /mcp, /skills, /memory, /init, /reload,
-/debug-dom, /help, /exit) there are a few that mirror Claude Code /
-Codex CLI:
+Type / in the prompt for hints (Tab completes) — that list is always complete,
+`/help <command>` describes any single one. Besides the session and config
+commands (/new or /clear, /sessions, /chats, /resume-id, /last, /chat, /cd,
+/pwd, /status, /config, /undo, /undo-list, /rewind, /rewind-list, /transcript,
+/tasks, /mcp, /skills, /memory, /remember, /init, /reload, /debug-dom, /help,
+/exit) there are a few that mirror Claude Code / Codex CLI:
 
 - /diff [--staged] — show the working-tree git diff (--staged for the index).
 - /diffstat — a one-line change summary (`git diff --stat`).
@@ -434,11 +444,12 @@ tests`). /cron "<min> <hour> <dom> <month> <dow>" <task> — run on a schedule.
   current task.
 
 The token context is also shown live: the status line above the input has the
-spinner/text on the left and the context on the right (e.g. `125k · 13%`,
-percent of a 1M context). It is COLORED by fill level: green below 50%,
-yellow 50-80%, red above 80%. It comes from the provider's own token
-counter (DeepSeek's `accumulated_token_usage`, Qwen's `input_tokens`, GLM's
-`prompt_tokens`) and is
+spinner/text on the left and the context on the right (e.g. `125k · 13%`). The
+percentage is of the ACTIVE provider's window — 1M for DeepSeek, a per-model
+value for Qwen and GLM (`qwen.contextLimit` / `glm.contextLimit`) — and it is
+COLORED by fill level: green below 50%, yellow 50-80%, red above 80%.
+It comes from the provider's own token counter (DeepSeek's
+`accumulated_token_usage`, Qwen's `input_tokens`, GLM's `prompt_tokens`) and is
 hidden until the first answer delivers it.
 
 ## Project context, skills and memory
@@ -571,8 +582,9 @@ Examples:
 /config lang en
 ```
 
-Changes are written to the project `.zamesrc.json` and applied right away
-(where possible without a restart).
+Changes are written to the HOME config (`~/.zames/config.json`), NOT to the
+project `.zamesrc.json` — a personal toggle must not leak into git — and applied
+right away (where possible without a restart).
 
 ### Language
 
@@ -629,7 +641,7 @@ signed-in browser profile.
 **How do I install a terminal AI coding agent?**
 
 ```bash
-npm install -g zames_pro   # Node.js >= 20; Chromium is fetched automatically
+npm install -g zames_pro   # Node.js >= 22; Chromium is fetched automatically
 cd your-project
 zames
 ```

package/llms.txt

@@ -20,7 +20,7 @@ LLM-friendly map of the project. Everything below is plain Markdown.
 - **Supported backends:** DeepSeek (`chat.deepseek.com`, default), Qwen
   (`chat.qwen.ai`), GLM (`chat.z.ai`). Live switch with
   `/provider <deepseek|qwen|glm>`; each backend keeps its own browser profile.
-- **Language / stack:** TypeScript (strict), Node.js >= 20, Playwright,
+- **Language / stack:** TypeScript (strict), Node.js >= 22, Playwright,
   Ink/React TUI, MCP client.
 - **License:** MIT. **Not affiliated** with DeepSeek, Alibaba or Zhipu AI.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.138",
+  "version": "2.82.140",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {

package/scripts/postinstall.mjs

@@ -1,3 +1,8 @@
+// Post-install step: fetch the Chromium build Playwright drives and, on a
+// Linux box that needs it, its system libraries. It runs BEFORE tsx is
+// guaranteed to be installed, so it stays a plain .mjs script. Every failure
+// is a WARNING, never a non-zero exit: a missing browser must not break
+// `npm install`, and the warning names the manual command to run instead.
 import { spawnSync } from 'node:child_process'
 
 const NL = String.fromCharCode(10)