zames_pro 2.82.46 → 2.82.48

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.48] - 2026-10-22
+
+### Fixed
+
+- **sessions:** cap the stored todo checklist
+
+## [2.82.47] - 2026-10-22
+
+### Fixed
+
+- **checkpoint:** take the pre-rewind backup after a successful extract
+
 ## [2.82.46] - 2026-10-22
 
 ### Fixed

package/dist/checkpoint.js

@@ -258,15 +258,18 @@ export class CheckpointStore {
             .catch(() => false);
         if (!exists)
             return { ok: false, reason: 'archive_missing' };
-        // Backup the CURRENT tree before touching it.
-        const backup = await this.create(record.workdir, 'pre-rewind', false);
         // Extract to a temp dir FIRST; only a successful extract may touch workdir
-        // (otherwise a bad archive would wipe the tree).
+        // (otherwise a bad archive would wipe the tree). The pre-rewind backup is
+        // taken AFTER this check: a corrupt archive would otherwise cost a FULL
+        // snapshot of the tree on every attempt, filling /checkpoints with
+        // identical entries and evicting the real ones.
         const tmp = await fs.mkdtemp(path.join(os.tmpdir(), 'zames-rewind-'));
         try {
             const res = await runTar(tarExtractArgs(record.file, tmp), tmp);
             if (res.code !== 0)
                 return { ok: false, reason: 'extract_failed' };
+            // Backup the CURRENT tree before touching it.
+            const backup = await this.create(record.workdir, 'pre-rewind', false);
             // Full restore: drop everything in workdir except the excludes, then
             // copy the snapshot in. A partial extract would leave behind files the
             // task created after the checkpoint.

package/dist/sessions.js

@@ -67,6 +67,8 @@ function safeName(id) {
 }
 // Save/update a session. workdir is needed so that when launched from the same
 // project we restore exactly its last chat.
+/** Hard cap on the todo checklist stored with a session. */
+export const SESSION_TODOS_CAP = 1000;
 export function saveSession({ id, title = '', workdir = '', todos, provider, }) {
     if (!id)
         return null;
@@ -91,8 +93,12 @@ export function saveSession({ id, title = '', workdir = '', todos, provider, })
         // Keep the previous checklist unless a new one is explicitly passed —
         // saveLastChat() calls this for title/workdir only and must not wipe it.
         const nextTodos = todos !== undefined ? todos : prev.todos;
-        if (nextTodos !== undefined)
-            data.todos = nextTodos;
+        if (nextTodos !== undefined) {
+            // A checklist is a UI indicator, not a database: a model that keeps
+            // appending items would grow the session file (read on every
+            // startup/restore) without bound. Keep the NEWEST entries.
+            data.todos = nextTodos.slice(-SESSION_TODOS_CAP);
+        }
         writeJsonAtomic(file, data);
         writeIndex({ id, workdir: data.workdir });
         return data;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.46",
+  "version": "2.82.48",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {