zames_pro 2.82.56 → 2.82.58

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.58] - 2026-10-23
+
+### Fixed
+
+- **commands:** keep a long answer in the restored dialogue instead of dropping it
+
+## [2.82.57] - 2026-10-23
+
+### Fixed
+
+- **shell:** strip every quote from a cd target before the sandbox check
+
 ## [2.82.56] - 2026-10-23
 
 ### Fixed

package/dist/commands.js

@@ -397,6 +397,12 @@ export function resolveExtraDir(input, workdir, t = translate('en')) {
 }
 /** How many messages of the dialogue are printed by default. */
 export const RESTORED_HISTORY_LIMIT = 20;
+/**
+ * Longest restored message KEPT for display. The system prompt (leaked into
+ * history) is far bigger and is filtered by the noise checks below; a real
+ * answer above this size is shortened instead of being dropped.
+ */
+export const RESTORED_MESSAGE_MAX = 100_000;
 /**
  * DeepSeek stores the assistant turn VERBATIM: either a raw tool-call JSON
  * ({"tool":"Read","args":{...}}, frequently dirty/truncated) or a `respond`
@@ -465,11 +471,17 @@ export function unescapeJsonString(s) {
  * Returns null when the message must not be shown.
  */
 export function normalizeRestoredMessage(m) {
-    const text = String((m && m.text) || '').trim();
+    let text = String((m && m.text) || '').trim();
     if (!text)
         return null;
-    if (text.length > 100_000)
-        return null; // the system-prompt / a giant blob
+    // The size cap exists to keep a leaked SYSTEM PROMPT (or another giant
+    // protocol blob) out of the restored dialogue. It must NOT drop a real
+    // answer: a long report/diff/document easily exceeds the cap, and dropping
+    // it silently left the operator with a dialogue where the agent's own reply
+    // was missing. Keep such a message but shorten it for display.
+    if (text.length > RESTORED_MESSAGE_MAX) {
+        text = text.slice(0, RESTORED_MESSAGE_MAX) + '…';
+    }
     if (m.role === 'user') {
         if (/^Tool result for /.test(text))
             return null;

package/dist/shell.js

@@ -33,7 +33,12 @@ export function assertCommandInsideRoot(root, command) {
     const cdRe = /(?:^|[;&|(\s`])(?:cd|pushd)\s*([^;&|)]+)/gi;
     let m;
     while ((m = cdRe.exec(cmd))) {
-        const raw = m[1].trim().replace(/^["']|["']$/g, '');
+        // The shell removes EVERY quote in the word, wherever it sits —
+        // `cd "a"/"../../.."` is one word whose value is `a/../../..`. Stripping
+        // only a matching PAIR at the ENDS left the inner quotes in place, so the
+        // target was compared as the literal `a/"/../../..` (which normalizes to
+        // a path INSIDE the root), passed the guard, and then escaped for real.
+        const raw = m[1].trim().replace(/["']/g, '');
         if (!raw || raw === '-')
             continue;
         // A `cd` target we cannot RESOLVE statically is rejected: the shell would

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.56",
+  "version": "2.82.58",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {