zames_pro 2.82.73 → 2.82.75

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.82.75] - 2026-10-24
+
+### Fixed
+
+- **xml:** keep an escaped quote inside an invoke attribute value
+
+## [2.82.74] - 2026-10-24
+
+### Fixed
+
+- **commands:** collapse dynamic slash hints that differ only by case
+
 ## [2.82.73] - 2026-10-24
 
 ### Fixed

package/dist/commands.js

@@ -1203,6 +1203,11 @@ export function buildSlashCommandHints(opts) {
     for (const d of opts.dynamic ?? []) {
         if (known.has(d.name.toLowerCase()))
             continue;
+        // Remember the DYNAMIC name too: two entries that differ only by case
+        // (`/foo` and `/FOO`) were both added, so the operator saw the same
+        // command twice and the second was unreachable (a slash command is
+        // resolved case-insensitively).
+        known.add(d.name.toLowerCase());
         base.push(d);
     }
     return base;

package/dist/xml-toolcall.js

@@ -30,17 +30,30 @@ function readAttr(attrs, name) {
 function readAllAttrs(attrs) {
     const Q = String.fromCharCode(34);
     const out = {};
-    const re = new RegExp('([A-Za-z_][A-Za-z0-9_]*)[ ]*=[ ]*[' + Q + ']([^' + Q + ']*)[' + Q + ']', 'g');
+    // The VALUE may contain an ESCAPED quote (`todos="[{\"content\":\"x\"}]"`):
+    // `[^"]*` stopped at the first one and truncated the argument. Accept a
+    // backslash-escaped quote inside the value, then unescape it.
+    const re = new RegExp('([A-Za-z_][A-Za-z0-9_]*)[ ]*=[ ]*[' +
+        Q +
+        ']((?:[^' +
+        Q +
+        '\\\\]|\\\\.)*)[' +
+        Q +
+        ']', 'g');
     let m;
     while ((m = re.exec(attrs)) !== null) {
         const key = m[1];
         if (key === 'name')
             continue;
         if (!(key in out))
-            out[key] = unescapeXml(m[2]);
+            out[key] = unescapeXml(decodeAttrEscapes(m[2]));
     }
     return out;
 }
+/** Decode the backslash escapes inside an attribute VALUE. */
+function decodeAttrEscapes(s) {
+    return String(s).replace(/\\(.)/g, '$1');
+}
 // The model sometimes produces a "hybrid" call: the tool name is an attribute
 // AND the arguments are inline JSON in the SAME opening tag, without any
 // <parameter> children. A real case from the transcript:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.82.73",
+  "version": "2.82.75",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen and other web LLMs — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {