zames_pro 2.82.60 → 2.82.62

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.62] - 2026-10-23
+
+### Fixed
+
+- **attachments:** do not inline a binary @file reference as text
+
+## [2.82.61] - 2026-10-23
+
+### Fixed
+
+- **tools:** Glob cannot report files outside the project root
+
 ## [2.82.60] - 2026-10-23
 
 ### Fixed

package/dist/attach-refs.js

@@ -6,6 +6,17 @@ import { extractAtFileRefs } from './path-token.js';
 // Extracted from src/index.ts so the logic is unit-testable without the whole
 // CLI. This module touches only the filesystem (no browser/terminal).
 const NL = String.fromCharCode(10);
+// A NUL byte in the head is the classic binary signal (text files essentially
+// never contain one). Only the head is scanned: a huge archive must not be
+// walked byte-by-byte just to decide it is not text.
+function isBinaryBuffer(buf) {
+    const n = Math.min(buf.length, 8000);
+    for (let i = 0; i < n; i++) {
+        if (buf[i] === 0)
+            return true;
+    }
+    return false;
+}
 // Resolve a pasted string into a path to an EXISTING file. Handles quoted
 // paths (drag&drop from some file managers adds quotes) and paths relative to
 // the working directory. Returns null when nothing matches.
@@ -92,13 +103,21 @@ export async function inlineAtRefs(workdir, text) {
         const file = await resolveAttachPath(workdir, ref);
         if (!file)
             continue;
-        let raw;
+        let buf;
         try {
-            raw = await fs.readFile(file, 'utf-8');
+            buf = await fs.readFile(file);
         }
         catch {
             continue;
         }
+        // A BINARY file (an image, an archive, a compiled blob) read as UTF-8
+        // becomes replacement characters and NUL bytes in the prompt — the model
+        // cannot use that, and the reference was still counted as inlined. Leave
+        // it in the text as a plain `@path` reference (the same answer the Read
+        // tool gives for a binary file).
+        if (isBinaryBuffer(buf))
+            continue;
+        const raw = buf.toString('utf-8');
         let body = raw;
         let note = '';
         // The per-file cap alone lets the TOTAL budget be overshot: a file that

package/dist/tools.js

@@ -300,12 +300,23 @@ export function createTools(workdir, { undo, todos, readOnly = false, subagents
                 const cwd = searchPath ? safe(String(searchPath)) : workdir;
                 const results = [];
                 for await (const f of glob(req(pattern, 'pattern'), { cwd })) {
-                    // Sandbox: ignore anything that goes outside root.
-                    const abs = path.resolve(cwd, f);
-                    const rel = path.relative(root, abs);
-                    if (rel.startsWith('..') || path.isAbsolute(rel))
+                    // Sandbox: ignore anything that goes outside root. safePath() does
+                    // the LEXICAL and the symlink-REAL check; a plain `rel.startsWith`
+                    // here passed a pattern carrying `..` (`../**/*.ts` listed a SIBLING
+                    // directory, and the printed path started with `..`).
+                    let inside = true;
+                    try {
+                        safePath(root, path.resolve(root, f));
+                    }
+                    catch {
+                        inside = false;
+                    }
+                    if (!inside)
                         continue;
-                    results.push(f);
+                    // Print a path relative to the PROJECT, never one that starts with
+                    // `..`: the pattern may carry `..` (`../**/*.ts`) and node's glob
+                    // then prefixes every result with it, which looked like an escape.
+                    results.push(path.relative(root, path.resolve(root, f)) || '.');
                 }
                 return results.length ? results.join('\n') : 'No matches found.';
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.60",
+  "version": "2.82.62",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {