zames_pro 2.82.49 → 2.82.51

package/dist/browser-pure.js

@@ -14,7 +14,7 @@ export function cleanAnswer(raw) {
         return '';
     return raw;
 }
-// Pure, state-free helpers extracted from browser.ts (BACKLOG C3). Nothing
+// Pure, state-free helpers extracted from browser.ts . Nothing
 // here touches the DeepSeekBrowser instance state, so this module is safe to
 // import anywhere (including hot-reloaded modules) without pulling in the
 // live Playwright context. browser.ts re-exports the public names, so the
@@ -245,8 +245,14 @@ export function mergeAuthMarker(raw, provider, at) {
                 providers[k] = v || {};
         }
         else if (j && typeof j === 'object') {
-            if (j.provider === 'qwen')
-                providers.qwen = { at: j.at };
+            // A legacy record carries ONE provider name. Only Qwen and GLM ever wrote
+            // one (`{provider:'qwen'|'glm', at}`); a BARE `{at}` was DeepSeek. Treating
+            // every non-qwen name as DeepSeek filed a legacy GLM session under
+            // `deepseek`, so /doctor reported a DeepSeek session and the GLM one
+            // vanished.
+            const p = typeof j.provider === 'string' ? j.provider : '';
+            if (p === 'qwen' || p === 'glm')
+                providers[p] = { at: j.at };
             else if (typeof j.at === 'string')
                 providers.deepseek = { at: j.at };
         }

package/dist/browser.js

@@ -18,7 +18,7 @@ import { translate, DEFAULT_LOCALE } from './i18n.js';
 // here preserves the existing public API (test/*.test.ts import them from
 // browser.ts).
 export { STOP_NAME_RE, CONTINUE_NAME_RE };
-// The pure, state-free helpers live in browser-pure.ts (BACKLOG C3): they are
+// The pure, state-free helpers live in browser-pure.ts : they are
 // imported for the class below and RE-EXPORTED here, so the public API of this
 // module is unchanged (tests and other modules import these names from
 // './browser.js').

package/dist/changelog.js

@@ -1,4 +1,4 @@
-// Conventional-Commits -> CHANGELOG draft (BACKLOG D2). PURE and
+// Conventional-Commits -> CHANGELOG draft. PURE and
 // unit-tested: the draft is built from git log OUTSIDE the release flow
 // (scripts/changelog-draft.mts), so a misparse never touches CHANGELOG.md.
 // We do NOT auto-write the file: a human (or the agent) reviews the draft

package/dist/checkpoint.js

@@ -4,7 +4,7 @@ import os from 'os';
 import { execFile } from 'child_process';
 import { randomBytes } from 'crypto';
 import { writeJsonAtomic } from './fsutil.js';
-// Checkpoints / rewind (BACKLOG B3).
+// Checkpoints / rewind .
 //
 // Undo (src/undo.ts) reverts ONE file write. A checkpoint snapshots the WHOLE
 // working tree at the start of a task, so a risky task can be rolled back with

package/dist/cli-args.js

@@ -1,4 +1,4 @@
-// PURE CLI argument parsing (BACKLOG C3). index.ts used to hold `args` as a
+// PURE CLI argument parsing . index.ts used to hold `args` as a
 // module-level constant plus three helpers closing over it, which made the
 // parsing impossible to unit-test in isolation (index.ts is the entry point and
 // is not covered). `createCliArgs(argv)` binds the argv ONCE and returns the

package/dist/config-command.js

@@ -1,4 +1,4 @@
-// The /config subcommand DISPATCH (BACKLOG C3). The PURE text rendering lives
+// The /config subcommand DISPATCH . The PURE text rendering lives
 // in config-commands.ts; this module owns the parsing/routing of the text
 // subcommands (list/get/set/reset/lang/path) and prints through injected
 // callbacks. Everything that touches live state (the runtime config object,

package/dist/config-commands.js

@@ -1,4 +1,4 @@
-// PURE rendering for the /config command's TEXT output (BACKLOG C3). These
+// PURE rendering for the /config command's TEXT output . These
 // helpers format the schema into lines; they touch no browser/terminal state,
 // so they are unit-tested without a live agent (the /config dispatch in
 // index.ts only prints what these return). The interactive menu lives in
@@ -14,7 +14,10 @@ export function configListValue(field, value, t) {
         return t('cfg.menu.default');
     if (typeof value === 'boolean')
         return value ? t('common.on') : t('common.off');
-    if (/password/i.test(field.path) && String(value).length > 0)
+    // Mask a real secret, but NOT a whitespace-only one — the same rule as
+    // configGetValue(): a blank password cannot log in, and masking it makes
+    // the list claim a password is configured while auto-login silently fails.
+    if (/password/i.test(field.path) && String(value).trim().length > 0)
         return '********';
     return JSON.stringify(value);
 }

package/dist/config-live.js

@@ -31,6 +31,16 @@ export function applyBrowserLiveConfig(path, value, browser) {
     if (!field || !(field in browser))
         return false;
     browser[field] = value;
+    // `answerTimeoutMs` is DERIVED into the watchdog (`askDeadlineMs` = the
+    // answer timeout + 60s) by the Qwen/GLM constructors. Pushing only the field
+    // left the deadline at its old value, so a LARGER timeout made the agent
+    // give up before the browser's own timeout ever fired. Re-derive it the same
+    // way the constructor does.
+    if (field === 'answerTimeoutMs' && 'askDeadlineMs' in browser) {
+        if (typeof value === 'number' && Number.isFinite(value) && value > 0) {
+            browser.askDeadlineMs = value + 60_000;
+        }
+    }
     return true;
 }
 /** Push undo.* / checkpoint.* changes onto the live stores. The stores copy

package/dist/config.js

@@ -70,7 +70,7 @@ export const DEFAULTS = {
         enabled: true,
         maxBackups: 200,
     },
-    // BACKLOG B3: snapshot the whole working tree at the start of each task so
+    // Snapshot the whole working tree at the start of each task so
     // /rewind can roll a risky task back in one step.
     checkpoint: {
         enabled: true,
@@ -601,11 +601,23 @@ export function getConfigField(path) {
 }
 export function getByPath(obj, path) {
     const parts = path.split('.');
+    // Same guard as setByPath: a dotted path must never reach the PROTOTYPE
+    // chain. `__proto__` used to return Object.prototype (an object), and
+    // `constructor` / `toString` the corresponding FUNCTION — the /config list
+    // then rendered `{}` for a field whose path did not exist instead of the
+    // default marker. Reading those keys is never meaningful for a config path.
+    // `toString`, `valueOf`, `hasOwnProperty`, ... are inherited METHODS, not
+    // config values: reading them through a dotted path returned a FUNCTION.
+    // Only an OWN property counts.
+    if (parts.some((p) => UNSAFE_PATH_KEYS.has(p)))
+        return undefined;
     let cur = obj;
     for (const p of parts) {
         if (cur === null || cur === undefined || typeof cur !== 'object') {
             return undefined;
         }
+        if (!Object.prototype.hasOwnProperty.call(cur, p))
+            return undefined;
         cur = cur[p];
     }
     return cur;

package/dist/context-command.js

@@ -0,0 +1,6 @@
+import { formatContextSources } from './commands.js';
+import { translate } from './i18n.js';
+/** Render the `/context` report for already-loaded sources. */
+export function renderContextReport(src, opts = {}, t = translate('en')) {
+    return formatContextSources(src.agents || [], src.memory || [], src.skills || [], src.commands || [], opts, t);
+}

package/dist/context.js

@@ -186,9 +186,25 @@ function clipIf(name, content, budget, fromTail = false) {
     // MEMORY.md is APPENDED to over time, so its newest (most relevant) notes
     // live at the TAIL — a head clip would drop exactly those. Keep the tail
     // for memory files, the head for AGENTS.md (whose top is the summary).
-    if (!fromTail)
-        return cleaned.slice(0, keep) + NL + NL + marker;
-    let slice = cleaned.slice(cleaned.length - keep);
+    //
+    // The cut is in UTF-16 units, so it can land BETWEEN the halves of a
+    // surrogate PAIR (an emoji / astral CJK char): the head would then end with
+    // a lone HIGH half and the tail would START with a lone LOW half. Both reach
+    // the model through the system prompt as broken code points (the same rule
+    // as truncateToolResult / capReport / cutHookText). Step one unit back for
+    // the head, one unit forward for the tail, so the pair is dropped whole.
+    if (!fromTail) {
+        let end = keep;
+        const last = cleaned.charCodeAt(end - 1);
+        if (last >= 0xd800 && last <= 0xdbff)
+            end--;
+        return cleaned.slice(0, end) + NL + NL + marker;
+    }
+    let start = cleaned.length - keep;
+    const first = cleaned.charCodeAt(start);
+    if (first >= 0xdc00 && first <= 0xdfff)
+        start++;
+    let slice = cleaned.slice(start);
     // Cut at a NOTE boundary, not mid-note: start the kept tail at the next line
     // that begins a bullet or a heading, so a half-sentence note is not left.
     const m = slice.search(/\n(?=[-*] |#{1,6} )/);
@@ -245,7 +261,14 @@ const PROJECT_SKILL_DIRS = [
     'skills',
 ];
 function parseFrontmatter(raw) {
-    const norm = raw.replace(CRLF_RE, NL);
+    // A leading BOM must be dropped BEFORE the `---` check: Windows editors and
+    // generators write one, and without this the frontmatter was not recognised
+    // at all (description / argument-hint / arguments silently lost).
+    // `skillBody` already strips it; the two must agree.
+    const bom = String.fromCharCode(0xfeff);
+    const norm = String(raw ?? '')
+        .replace(new RegExp('^' + bom), '')
+        .replace(CRLF_RE, NL);
     if (!norm.startsWith('---'))
         return {};
     const end = norm.indexOf(NL + '---', 3);

package/dist/diff.js

@@ -2,22 +2,65 @@ import { theme } from './theme.js';
 export function unifiedDiff(a, b, { label = '' } = {}) {
     const la = a.split(String.fromCharCode(10));
     const lb = b.split(String.fromCharCode(10));
-    const n = Math.max(la.length, lb.length);
     const out = [];
     if (label)
         out.push('... ' + label);
-    for (let i = 0; i < n; i++) {
-        const x = la[i];
-        const y = lb[i];
-        if (x === y)
+    // A LINE diff, not a positional compare: an insertion at the top of a
+    // file shifts every following line, and comparing line i with line i
+    // reported the WHOLE file as removed AND added (a 20-line file with one
+    // new first line produced 41 diff lines). The undo/`/diff` preview became
+    // unreadable and the model was told everything changed. A longest-common-
+    // subsequence walk emits only the lines that really differ.
+    for (const op of diffOps(la, lb)) {
+        if (op.kind === 'same')
             continue;
-        if (x !== undefined)
-            out.push('-' + x);
-        if (y !== undefined)
-            out.push('+' + y);
+        out.push((op.kind === 'del' ? '-' : '+') + op.line);
     }
     return out.join(String.fromCharCode(10));
 }
+/**
+ * Longest-common-subsequence line diff (Hunt–Szymanski style table, O(n*m)
+ * memory). Files here are a handful of lines (a single edit preview), so the
+ * simple dynamic-programming table is fine and keeps the module dependency-
+ * free. A change pair is emitted as `-old` then `+new`, like a real diff.
+ */
+function diffOps(a, b) {
+    const n = a.length;
+    const m = b.length;
+    // lcs[i][j] = length of the LCS of a[i..] and b[j..].
+    const lcs = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));
+    for (let i = n - 1; i >= 0; i--) {
+        for (let j = m - 1; j >= 0; j--) {
+            lcs[i][j] =
+                a[i] === b[j]
+                    ? lcs[i + 1][j + 1] + 1
+                    : Math.max(lcs[i + 1][j], lcs[i][j + 1]);
+        }
+    }
+    const ops = [];
+    let i = 0;
+    let j = 0;
+    while (i < n && j < m) {
+        if (a[i] === b[j]) {
+            ops.push({ kind: 'same', line: a[i] });
+            i++;
+            j++;
+        }
+        else if (lcs[i + 1][j] >= lcs[i][j + 1]) {
+            ops.push({ kind: 'del', line: a[i] });
+            i++;
+        }
+        else {
+            ops.push({ kind: 'add', line: b[j] });
+            j++;
+        }
+    }
+    while (i < n)
+        ops.push({ kind: 'del', line: a[i++] });
+    while (j < m)
+        ops.push({ kind: 'add', line: b[j++] });
+    return ops;
+}
 export function colorDiff(diffText) {
     return diffText
         .split(String.fromCharCode(10))

package/dist/extraTools.js

@@ -226,6 +226,13 @@ export function createExtraTools(workdir, { undo, todos } = {}) {
         if (v === undefined || v === null) {
             throw new Error(`Missing required argument: ${name}. Add "${name}" to the tool call arguments and retry.`);
         }
+        // `path`/`pattern` are strings by contract; an OBJECT used to become
+        // "[object Object]" and reach the fs layer as a literal file name.
+        if (typeof v === 'object' || typeof v === 'function') {
+            throw new Error(`Invalid required argument ${name}: expected a string, got ` +
+                JSON.stringify(v) +
+                '. Re-send the call with a plain string value.');
+        }
         const s = String(v);
         if (s === '' || s === 'undefined' || s === 'null') {
             throw new Error(`Invalid required argument ${name}: ${JSON.stringify(v)}. Provide a non-empty value for "${name}" and retry.`);

package/dist/glm-chats.js

@@ -157,9 +157,26 @@ export function parseGlmHistory(json) {
             : null;
     if (!arr)
         return [];
+    // The map is UNORDERED and `timestamp` restores the dialogue order. The
+    // value is a NUMBER or a numeric string in the builds seen so far, but an
+    // ISO stamp (`2026-10-23T10:00:00Z`) makes `Number(...)` NaN, and a NaN
+    // comparator keeps the INSERTION order — a scrambled dialogue. Fall back to
+    // Date.parse for a non-numeric string.
+    const stampOf = (m) => {
+        const raw = m.timestamp;
+        const n = Number(raw);
+        if (Number.isFinite(n) && n !== 0)
+            return n;
+        if (typeof raw === 'string') {
+            const t = Date.parse(raw);
+            if (Number.isFinite(t))
+                return t;
+        }
+        return 0;
+    };
     const sorted = arr
         .filter((x) => !!x && typeof x === 'object')
-        .sort((a, b) => (Number(a.timestamp) || 0) - (Number(b.timestamp) || 0));
+        .sort((a, b) => stampOf(a) - stampOf(b));
     const out = [];
     for (const m of sorted) {
         // The role comes from `role` (confirmed by the live fixture). Only the

package/dist/glm-net-capture.js

@@ -172,6 +172,10 @@ export function extractAnswer(body) {
         return sse;
     return extractFromJson(body);
 }
+/** A usable token count: a FINITE NON-NEGATIVE number. */
+function isUsageCount(v) {
+    return typeof v === 'number' && Number.isFinite(v) && v >= 0;
+}
 /**
  * The CONTEXT size (tokens) from `usage.prompt_tokens` - the prompt size for
  * the turn, the same idea as DeepSeek's accumulated_token_usage. Falls back to
@@ -186,9 +190,14 @@ export function extractTokenUsage(body) {
         if (!usage || typeof usage !== 'object')
             continue;
         const u = usage;
-        if (typeof u.prompt_tokens === 'number' && Number.isFinite(u.prompt_tokens))
+        // A token count is a FINITE NON-NEGATIVE number. A negative payload (a
+        // nonsense reply, or a wrapped `int` in a proxy build) used to become
+        // `browser._lastTokenUsage` as-is: the context badge disappeared
+        // (tokenStatusLevel rejects it) while the auto-compact percentage went
+        // negative and never fired. Treat it as "no usage", like a non-number.
+        if (isUsageCount(u.prompt_tokens))
             lastPrompt = u.prompt_tokens;
-        if (typeof u.total_tokens === 'number' && Number.isFinite(u.total_tokens))
+        if (isUsageCount(u.total_tokens))
             lastTotal = u.total_tokens;
     }
     if (lastPrompt !== null)
@@ -205,9 +214,9 @@ export function extractTokenUsage(body) {
             : null;
         const usage = ((envelope ? envelope.usage : undefined) ?? obj?.usage);
         if (usage) {
-            if (typeof usage.prompt_tokens === 'number')
+            if (isUsageCount(usage.prompt_tokens))
                 return usage.prompt_tokens;
-            if (typeof usage.total_tokens === 'number')
+            if (isUsageCount(usage.total_tokens))
                 return usage.total_tokens;
         }
     }
@@ -279,7 +288,16 @@ const ERROR_PAYLOAD_RE = /"type"\s*:\s*"error"|"error"\s*:|\{\s*"code"\s*:/i;
  * message instead of retrying for the whole budget.
  */
 export function isQuotaExhaustedText(body) {
-    return /insufficient_quota|quota (?:exceeded|exhausted)|exceeded your current quota/i.test(String(body || ''));
+    const b = String(body || '');
+    if (!b)
+        return false;
+    // Same guard as every other z.ai classifier: a normal ANSWER may legitimately
+    // discuss `insufficient_quota` / "exceeded your current quota" (the operator
+    // asked how to handle that API error). Without this the answer was taken for
+    // a refusal and a good turn was abandoned with `glm.quota_exhausted`.
+    if (!ERROR_PAYLOAD_RE.test(b) && hasAnswerContent(b))
+        return false;
+    return /insufficient_quota|quota (?:exceeded|exhausted)|exceeded your current quota/i.test(b);
 }
 export function isRateLimitText(body) {
     const b = String(body || '');

package/dist/goal.js

@@ -96,7 +96,12 @@ export function parseGoalVerdict(text) {
     // separator is checked on the character FOLLOWING the matched value (a
     // lookahead INSIDE the value pattern was useless: the value alternatives
     // always end on a word boundary of their own).
-    const label = /VERDICT\s*[*_`]*\s*:\s*[*_`]*\s*(IMPOSSIBLE|NOT[_ -]?MET|MET)/gi;
+    // A right boundary is REQUIRED: without it `VERDICT: METS` /
+    // `METADATA` parsed as MET, and MET CLEARS the goal — an unfinished task
+    // looked done. `\b` alone is not enough: in `MET-ish` the hyphen is a word
+    // boundary, so a hyphen/underscore directly after the value is rejected
+    // explicitly (a hyphen is only legal INSIDE `NOT-MET`).
+    const label = /VERDICT\s*[*_`]*\s*:\s*[*_`]*\s*(IMPOSSIBLE|NOT[_ -]?MET|MET)(?![\w-])/gi;
     let m;
     let status = null;
     while ((m = label.exec(t)) !== null) {

package/dist/i18n/deepseek.js

@@ -96,9 +96,9 @@ export const deepseekMessages = {
         ru: '✖ {provider} перестал отвечать, лимит повторов исчерпан. Модель не дала ответа — проверь чат вручную.',
         en: '✖ {provider} stopped responding, retry limit exhausted. The model gave no answer — check the chat manually.',
     },
-    'ds.tool_retry': {
-        ru: '⏳ Агент не распознал ответ модели — прошу продолжить ({attempt}/{max})...',
-        en: '⏳ The agent did not recognize the model answer — asking it to continue ({attempt}/{max})...',
+    'ds.text_no_tool': {
+        ru: '⏳ Модель ответила текстом без вызова инструмента ({attempt}/{max}) — прошу вызвать инструмент...',
+        en: '⏳ The model answered with plain text and no tool call ({attempt}/{max}) — asking for a tool call...',
     },
     'ds.not_launched': {
         ru: '✖ Браузер не запущен.',

package/dist/i18n/self-review.js

@@ -183,4 +183,8 @@ export const selfReviewMessages = {
         ru: 'Использование: /resume-id <chat id>',
         en: 'Usage: /resume-id <chat id>',
     },
+    'sessions.provider_mismatch': {
+        ru: 'Сессия принадлежит провайдеру {owner}, а активен {active}: чат не откроется. Переключись командой /provider {owner} и повтори.',
+        en: 'This session belongs to {owner}, but {active} is active: the chat will not open. Switch with /provider {owner} and retry.',
+    },
 };

package/dist/i18n.js

@@ -37,7 +37,7 @@ export function normalizeLocale(v) {
     return DEFAULT_LOCALE;
 }
 // String catalog. Key -> { ru, en }. If a key is missing we return the key itself.
-// Split into section files (C3 step 1); merged here so callers keep importing
+// Split into section files; merged here so callers keep importing
 // CATALOG from a single place.
 export const CATALOG = {
     ...commonMessages,
@@ -55,7 +55,13 @@ export const CATALOG = {
 export function translate(locale) {
     const loc = isLocale(locale) ? locale : DEFAULT_LOCALE;
     return (key, params) => {
-        const entry = CATALOG[key];
+        // A plain-object lookup ALSO resolves Object.prototype members, so a key
+        // like 'toString' returned the inherited FUNCTION: the caller got
+        // `undefined` (no params) or a TypeError (`.replace is not a function`).
+        // Only an OWN entry is a translation.
+        const entry = Object.prototype.hasOwnProperty.call(CATALOG, key)
+            ? CATALOG[key]
+            : undefined;
         const template = entry ? entry[loc] || entry[DEFAULT_LOCALE] : key;
         if (!params)
             return template;