zames_pro 2.82.67 → 2.82.69

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.69] - 2026-10-24
+
+### Fixed
+
+- **attachments:** keep the extension when a temp name is capped
+
+## [2.82.68] - 2026-10-24
+
+### Fixed
+
+- **tools:** do not drop read-only MCP tools from plan mode
+
 ## [2.82.67] - 2026-10-24
 
 ### Fixed

package/dist/attachments.js

@@ -23,11 +23,20 @@ export function contentHash(data) {
     return createHash('sha1').update(data).digest('hex');
 }
 function sanitize(name) {
-    return (String(name || '')
+    const clean = String(name || '')
         .replace(/[\u0000-\u001f\u007f]/g, '')
         .replace(/[\\/:*?"<>|]/g, '_')
-        .replace(/\s+/g, '_')
-        .slice(0, 80) || 'file');
+        .replace(/\s+/g, '_');
+    if (!clean)
+        return 'file';
+    if (clean.length <= 80)
+        return clean;
+    // The cap must not eat the EXTENSION: a long name became a bare stem, so the
+    // temp file had no `.png` and every extension-based check (guessMime,
+    // isImageName, the upload dialog) saw a plain blob instead of an image.
+    const ext = path.extname(clean).slice(0, 16);
+    const stem = clean.slice(0, clean.length - ext.length);
+    return stem.slice(0, Math.max(1, 80 - ext.length)) + ext;
 }
 export function guessMime(name) {
     const ext = path.extname(String(name || '')).toLowerCase();

package/dist/tools.js

@@ -479,6 +479,10 @@ const MCP_MUTATING_WORDS = new Set(('click type navigate press upload select dra
 // Multi-word verbs are matched as a substring of the normalized name: they
 // never stand alone as ONE `_word_`, so a word-set alone missed them.
 const MCP_MUTATING_PHRASES = ['run_code', 'run_', 'handle_dialog'];
+// Read-only SCOPES that legitimately prefix a verb-like word (`read_...`,
+// `get_...`, `list_...`, `describe_...`): a name like `read_insert_log` is a
+// read action on a log, not an insert. A writer never puts these first.
+const MCP_READ_SCOPES = new Set(['read', 'get', 'list', 'describe', 'fetch']);
 // A camelCase name is split BEFORE it is lowercased: `browserClick` used to
 // become `browserclick` (one word, no verb) and slipped through read-only mode.
 function splitCamelCase(s) {
@@ -494,12 +498,35 @@ export function isMutatingMcpTool(name) {
     if (MCP_MUTATING_PHRASES.some((p) => norm.includes(p)))
         return true;
     const words = norm.split('_').filter(Boolean);
+    // A read SCOPE (`read_…`, `get_…`) makes the whole name a READ even when a
+    // verb-like word follows: `describe_type` describes a type,
+    // `read_insert_log` reads a log. Dropping them from plan mode removed a tool
+    // the model may use. Checked BEFORE the word match, so the scope word wins.
+    if (MCP_READ_SCOPES.has(words[0]))
+        return false;
     if (words.some((w) => MCP_MUTATING_WORDS.has(w)))
         return true;
     // A CONCATENATED style (all lowercase, no separator: `browserclick`,
-    // `pageevaluate`) still hides a writer. A verb as a substring is safe here
-    // because every verb is a whole action word no read-only tool contains.
-    return [...MCP_MUTATING_WORDS].some((v) => norm.includes(v));
+    // `pageevaluate`) still hides a writer. A BARE substring test is too
+    // aggressive, though: `get_settings` contains `set`, `get_keywords`
+    // contains `key`, `read_insert_log` contains `insert`, `describe_type`
+    // contains `type` — genuine READ-ONLY tools were dropped from plan mode.
+    // A concatenated verb is only trusted when it is a PREFIX of the name
+    // (`browserclick` -> after the `browser` scope) or spans the WHOLE name
+    // (`pageevaluate`); a verb buried inside another word is not an action.
+    const compact = norm.replace(/_/g, '');
+    const lastWord = words[words.length - 1];
+    return [...MCP_MUTATING_WORDS].some((v) => {
+        if (lastWord === v)
+            return true;
+        // A concatenated writer glues the verb to a SCOPE word: `fileupload`,
+        // `mouseclick`, `codeexecute`. Only the scope+verb pair counts — a bare
+        // word that merely CONTAINS the letters (`readinsertlog`,
+        // `describetype`) is a read action on a thing, not a write.
+        if (!compact.endsWith(v) || compact === v)
+            return false;
+        return !MCP_READ_SCOPES.has(compact.slice(0, -v.length));
+    });
 }
 // Merge MCP tools into the base set. In read-only (plan) mode the MCP tools
 // must be filtered too: an MCP server (e.g. @playwright/mcp) exposes mutating

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.67",
+  "version": "2.82.69",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {