zames_pro 2.82.22 → 2.82.23

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.23] - 2026-10-22
+
+### Fixed
+
+- **shell:** normalize the runFile timeout instead of throwing
+
 ## [2.82.22] - 2026-10-22
 
 ### Fixed

package/dist/shell.js

@@ -259,16 +259,23 @@ export function killAllBackground() {
 // whenever an argument comes from the model: the shell never sees it, so
 // $(...), backticks and quotes cannot be interpreted as commands.
 export function runFile(workdir, file, args, timeout = 30_000, signal, okExitCodes = []) {
+    // execFile validates `timeout` SYNCHRONOUSLY (`ERR_OUT_OF_RANGE` for a
+    // negative, fractional or non-numeric value) and the throw would escape this
+    // promise, so a sloppy call crashed the tool instead of returning a result.
+    // Normalize to the unsigned-integer contract, like runShell does.
+    const safeTimeout = typeof timeout === 'number' && Number.isFinite(timeout) && timeout >= 0
+        ? Math.floor(timeout)
+        : 30_000;
     return new Promise((resolve) => {
         execFile(file, args, {
             cwd: workdir,
-            timeout,
+            timeout: safeTimeout,
             maxBuffer: 1024 * 1024 * 8,
             windowsHide: true,
             env: { ...process.env },
             signal,
         }, (err, stdout, stderr) => {
-            resolve(formatExecResult(err, stdout, stderr, timeout, okExitCodes));
+            resolve(formatExecResult(err, stdout, stderr, safeTimeout, okExitCodes));
         });
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.22",
+  "version": "2.82.23",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {