zames_pro 2.88.2 → 2.90.0

package/dist/config.js

@@ -3,14 +3,21 @@ import path from 'path';
 import os from 'os';
 import { DEFAULT_DIAGNOSTICS } from './diagnostics.js';
 import { DEFAULT_LOCALE } from './i18n.js';
+// The /config schema is DATA ONLY and lives in its own module; re-exported
+// here so every existing importer keeps working.
+export { CONFIG_SCHEMA, CONFIG_TOP_GROUPS, getConfigField, fieldsOfTopGroup, subgroupsOf, topGroupModified, } from './config-schema.js';
+import { getConfigField } from './config-schema.js';
 import { writeJsonAtomic } from './fsutil.js';
-import { PROVIDER_IDS } from './providers.js';
-import { DEFAULT_THEME, themeNames } from './theme.js';
+import { DEFAULT_THEME } from './theme.js';
 const ZAMES_HOME = path.join(os.homedir(), '.zames');
 const HOME_CONFIG = path.join(ZAMES_HOME, 'config.json');
 // The PROJECT config path is resolved LAZILY: `/cd` changes process.cwd() at
 // runtime, so freezing it at import time meant a `.zamesrc.json` in the new
 // working directory was never read (and writes went to the OLD directory).
+/** The HOME config file (`~/.zames/config.json`). */
+export function homeConfigPath() {
+    return HOME_CONFIG;
+}
 export function projectConfigPath() {
     return path.join(process.cwd(), '.zamesrc.json');
 }
@@ -118,6 +125,13 @@ export const DEFAULTS = {
         // out of the main context, and the main chat is restored afterwards.
         subagents: true,
         maxSubagents: 3,
+        // N8: providers a task may CONTINUE on after the active one exhausted its
+        // retries. Empty by default (off): a fallback is only used for an
+        // AUTHORIZED provider (auth marker + a confirmed login), never a guest.
+        fallbackProviders: [],
+        // `ask` (the default) asks the operator before switching; `auto` switches
+        // without a prompt.
+        fallbackMode: 'ask',
         deepThinking: false,
         webSearch: true,
         // OFF by default: the telemetry file only serves diagnosis and manual
@@ -130,6 +144,9 @@ export const DEFAULTS = {
             password: '',
             saveSession: true,
         },
+        // N21: where the password lives. `config` keeps the historical field,
+        // `none` never stores it, `keychain` uses the OS store (with a fallback).
+        passwordStore: 'config',
     },
     ui: {
         locale: DEFAULT_LOCALE,
@@ -276,409 +293,6 @@ function deepMerge(target, source) {
         }
     }
 }
-export const CONFIG_SCHEMA = [
-    {
-        path: 'ui.locale',
-        type: 'enum',
-        values: ['ru', 'en'],
-        labelKey: 'cfg.f.ui_locale',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'maxIterations',
-        type: 'number',
-        min: 0,
-        max: 100000,
-        labelKey: 'cfg.f.maxIterations',
-        groupKey: 'cfg.group.agent',
-    },
-    {
-        path: 'ui.inputBorder',
-        type: 'enum',
-        values: ['round', 'single', 'double', 'bold', 'none'],
-        labelKey: 'cfg.f.ui_inputBorder',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'ui.theme',
-        type: 'enum',
-        values: themeNames(),
-        labelKey: 'cfg.f.ui_theme',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'ui.answerWidth',
-        type: 'number',
-        min: 0,
-        max: 1000,
-        labelKey: 'cfg.f.ui_answerWidth',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'ui.tui',
-        type: 'boolean',
-        labelKey: 'cfg.f.ui_tui',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'ui.alternateScreen',
-        type: 'boolean',
-        labelKey: 'cfg.f.ui_alternateScreen',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'ui.mouseScroll',
-        type: 'boolean',
-        labelKey: 'cfg.f.ui_mouseScroll',
-        groupKey: 'cfg.group.ui',
-    },
-    {
-        path: 'headless',
-        type: 'boolean',
-        labelKey: 'cfg.f.headless',
-        groupKey: 'cfg.group.agent',
-    },
-    {
-        path: 'browser.auth.username',
-        type: 'string',
-        labelKey: 'cfg.f.browser_authUsername',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.auth.password',
-        type: 'string',
-        labelKey: 'cfg.f.browser_authPassword',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.auth.saveSession',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_authSaveSession',
-        groupKey: 'cfg.group.browser',
-    },
-    // Each non-DeepSeek provider owns its credentials, so a DeepSeek login is
-    // never typed into a Qwen/GLM form (and vice versa). They MUST be in the
-    // schema: writeConfigValue rejects an unknown key, which silently dropped
-    // every GLM/Qwen credential saved from the login window.
-    {
-        path: 'qwen.auth.username',
-        type: 'string',
-        labelKey: 'cfg.f.qwen_authUsername',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'qwen.auth.password',
-        type: 'string',
-        labelKey: 'cfg.f.qwen_authPassword',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.auth.username',
-        type: 'string',
-        labelKey: 'cfg.f.glm_authUsername',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.auth.password',
-        type: 'string',
-        labelKey: 'cfg.f.glm_authPassword',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'provider',
-        type: 'enum',
-        values: [...PROVIDER_IDS],
-        labelKey: 'cfg.f.provider',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'qwen.model',
-        type: 'string',
-        labelKey: 'cfg.f.qwen_model',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'qwen.contextLimit',
-        type: 'number',
-        min: 10_000,
-        max: 10_000_000,
-        labelKey: 'cfg.f.qwen_contextLimit',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'qwen.minSendIntervalMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.qwen_minSendIntervalMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'qwen.answerTimeoutMs',
-        type: 'number',
-        min: 1000,
-        max: 3600000,
-        labelKey: 'cfg.f.qwen_answerTimeoutMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.model',
-        type: 'string',
-        labelKey: 'cfg.f.glm_model',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.contextLimit',
-        type: 'number',
-        min: 10_000,
-        max: 10_000_000,
-        labelKey: 'cfg.f.glm_contextLimit',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.minSendIntervalMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.glm_minSendIntervalMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'glm.answerTimeoutMs',
-        type: 'number',
-        min: 1000,
-        max: 3600000,
-        labelKey: 'cfg.f.glm_answerTimeoutMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'debug',
-        type: 'boolean',
-        labelKey: 'cfg.f.debug',
-        groupKey: 'cfg.group.agent',
-    },
-    {
-        path: 'hotReload',
-        type: 'boolean',
-        labelKey: 'cfg.f.hotReload',
-        groupKey: 'cfg.group.agent',
-    },
-    {
-        path: 'undo.enabled',
-        type: 'boolean',
-        labelKey: 'cfg.f.undo_enabled',
-        groupKey: 'cfg.group.undo',
-    },
-    {
-        path: 'undo.maxBackups',
-        type: 'number',
-        min: 1,
-        max: 100000,
-        labelKey: 'cfg.f.undo_maxBackups',
-        groupKey: 'cfg.group.undo',
-    },
-    {
-        path: 'checkpoint.enabled',
-        type: 'boolean',
-        labelKey: 'cfg.f.checkpoint_enabled',
-        groupKey: 'cfg.group.checkpoint',
-    },
-    {
-        path: 'checkpoint.maxBackups',
-        type: 'number',
-        min: 1,
-        max: 1000,
-        labelKey: 'cfg.f.checkpoint_maxBackups',
-        groupKey: 'cfg.group.checkpoint',
-    },
-    {
-        path: 'transcript.enabled',
-        type: 'boolean',
-        labelKey: 'cfg.f.transcript_enabled',
-        groupKey: 'cfg.group.transcript',
-    },
-    {
-        path: 'browser.answerTimeoutMs',
-        type: 'number',
-        min: 1000,
-        max: 3600000,
-        labelKey: 'cfg.f.browser_answerTimeoutMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.askRetries',
-        type: 'number',
-        min: 1,
-        max: 100,
-        labelKey: 'cfg.f.browser_askRetries',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.stabilityChecks',
-        type: 'number',
-        min: 1,
-        max: 100,
-        labelKey: 'cfg.f.browser_stabilityChecks',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.stabilityDelayMs',
-        type: 'number',
-        min: 0,
-        max: 60000,
-        labelKey: 'cfg.f.browser_stabilityDelayMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.minSendIntervalMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.browser_minSendIntervalMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.thinkingExtraMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.browser_thinkingExtraMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.rateLimitWaitMs',
-        type: 'number',
-        min: 0,
-        max: 3600000,
-        labelKey: 'cfg.f.browser_rateLimitWaitMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.maxRateLimitRetries',
-        type: 'number',
-        min: 0,
-        max: 100,
-        labelKey: 'cfg.f.browser_maxRateLimitRetries',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.maxIncompleteRetries',
-        type: 'number',
-        min: 0,
-        max: 100,
-        labelKey: 'cfg.f.browser_maxIncompleteRetries',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.incompleteWaitMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.browser_incompleteWaitMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.autoContinue',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_autoContinue',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.sendTelemetry',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_sendTelemetry',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.loginTimeoutMs',
-        type: 'number',
-        min: 30_000,
-        max: 3_600_000,
-        labelKey: 'cfg.f.browser_loginTimeoutMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.continueMinGapMs',
-        type: 'number',
-        min: 0,
-        max: 600000,
-        labelKey: 'cfg.f.browser_continueMinGapMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.askDeadlineMs',
-        type: 'number',
-        min: 30000,
-        max: 1800000,
-        labelKey: 'cfg.f.browser_askDeadlineMs',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.maxAfterToolRetries',
-        type: 'number',
-        min: 0,
-        max: 50,
-        labelKey: 'cfg.f.browser_maxAfterToolRetries',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.autoCompact',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_autoCompact',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.autoCompactPct',
-        type: 'number',
-        min: 50,
-        max: 100,
-        labelKey: 'cfg.f.browser_autoCompactPct',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.resendPromptOnResume',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_resendPromptOnResume',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.subagents',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_subagents',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.maxSubagents',
-        type: 'number',
-        min: 0,
-        max: 20,
-        labelKey: 'cfg.f.browser_maxSubagents',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.deepThinking',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_deepThinking',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'browser.webSearch',
-        type: 'boolean',
-        labelKey: 'cfg.f.browser_webSearch',
-        groupKey: 'cfg.group.browser',
-    },
-    {
-        path: 'ui.contextLimit',
-        type: 'number',
-        min: 10_000,
-        max: 10_000_000,
-        labelKey: 'cfg.f.ui_contextLimit',
-        groupKey: 'cfg.group.ui',
-    },
-];
-export function getConfigField(path) {
-    return CONFIG_SCHEMA.find((f) => f.path === path);
-}
 export function getByPath(obj, path) {
     const parts = path.split('.');
     // Two guards, both load-bearing. UNSAFE_PATH_KEYS keeps a dotted path off

package/dist/dev-commands.js

@@ -0,0 +1,27 @@
+// N2 group (e): the DEV-ONLY self-development commands — /improve, /backlog,
+// /self-review, /self-fix, /self-done, /self-list, /self-diff, /self-apply.
+//
+// They are registry entries with `devOnly: true`, so the guard that used to be
+// a separate pre-check in the main loop is the SAME data the dispatch reads:
+// a regular user gets `msg.dev_only`, dev mode runs the handler. The list here
+// and `DEV_ONLY_COMMANDS` in src/commands.ts are kept in sync by a unit test.
+export function createDevCommands(deps) {
+    return [
+        { name: 'improve', devOnly: true, handler: (c) => deps.improve(c.rest) },
+        { name: 'backlog', devOnly: true, handler: (c) => deps.backlog(c.rest) },
+        {
+            name: 'self-review',
+            devOnly: true,
+            handler: (c) => deps.selfReview(c.rest),
+        },
+        { name: 'self-fix', devOnly: true, handler: (c) => deps.selfFix(c.rest) },
+        { name: 'self-done', devOnly: true, handler: () => deps.selfDone() },
+        { name: 'self-list', devOnly: true, handler: () => deps.selfList() },
+        { name: 'self-diff', devOnly: true, handler: (c) => deps.selfDiff(c.rest) },
+        {
+            name: 'self-apply',
+            devOnly: true,
+            handler: (c) => deps.selfApply(c.rest),
+        },
+    ];
+}

package/dist/dev-watch.js

@@ -0,0 +1,96 @@
+import { readdirSync, statSync } from 'node:fs';
+import path from 'node:path';
+// N4: in dev mode a source file that is NOT hot-reloadable silently keeps
+// running its OLD copy after an edit — the fix "does not work" until zames is
+// restarted. Only `browser.ts` used to be watched. This module computes the
+// FULL set of such files from the source tree, so an edit to index.ts,
+// run-task.ts, a provider browser, browser-login.ts, send-*.ts or the Ink TUI
+// is reported too.
+/**
+ * Names (without extension) of the modules that /reload can hot-swap. Kept
+ * here so the watcher and `index.ts`'s RELOADABLE list cannot drift: the
+ * test asserts every entry is a real module.
+ */
+export const HOT_RELOADABLE = new Set([
+    'mcp',
+    'tools',
+    'extraTools',
+    'agent-loop',
+    'system-prompt',
+    'gitTools',
+    'web',
+    'self-review',
+    'diff',
+    'undo',
+    'checkpoint',
+    'transcript',
+    'spinner',
+    'config',
+    'fsutil',
+    'backlog',
+    'commands',
+    'run-task',
+    'attach-refs',
+]);
+/** A source file in `src/` (recursively) whose basename — without `.ts`/`.tsx` — is not hot-reloadable. */
+export function nonReloadableSources(srcDir, hot = HOT_RELOADABLE) {
+    const out = [];
+    const walk = (dir) => {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            const full = path.join(dir, name);
+            let isDir;
+            try {
+                isDir = statSync(full).isDirectory();
+            }
+            catch {
+                continue;
+            }
+            if (isDir) {
+                walk(full);
+                continue;
+            }
+            const m = /\.(ts|tsx)$/.exec(name);
+            if (!m)
+                continue;
+            const base = name.slice(0, -m[0].length);
+            // `index.ts` IS the entry point (it is not reloaded either), so it is
+            // included like any other non-reloadable module.
+            if (!hot.has(base))
+                out.push(full);
+        }
+    };
+    walk(srcDir);
+    return out.sort();
+}
+/**
+ * Compare the mtimes of the watched files with the previous snapshot and
+ * return the CHANGED ones (first call initializes the snapshot and returns
+ * an empty list).
+ */
+export function diffChanged(files, previous) {
+    const changed = [];
+    for (const f of files) {
+        let mtime;
+        try {
+            mtime = statSync(f).mtimeMs;
+        }
+        catch {
+            continue;
+        }
+        const prev = previous.get(f);
+        if (prev === undefined)
+            previous.set(f, mtime);
+        else if (mtime !== prev) {
+            previous.set(f, mtime);
+            changed.push(f);
+        }
+    }
+    return changed;
+}

package/dist/first-run.js

@@ -0,0 +1,80 @@
+// N19: the FIRST-RUN WIZARD decision, as a pure state machine.
+//
+// A new user is dropped straight into DeepSeek with no explanation: which
+// language, which provider, why DeepSeek needs a real sign-in while Qwen/GLM
+// have guest limits. The wizard is shown ONLY on a truly fresh install (no
+// `~/.zames/config.json`), never in a non-TTY / one-shot / non-interactive
+// login run, and Esc accepts the defaults.
+//
+// Only the STEP LOGIC lives here (unit-tested); the Ink widgets (SelectList,
+// LoginForm) already exist and are rendered by the caller.
+export function initialWizardState() {
+    return { step: 0, locale: null, provider: null, needsLogin: false };
+}
+/**
+ * Should the wizard run at all? A fresh HOME only: an existing config means
+ * the operator already made these choices, and a non-interactive run (a pipe,
+ * `--task`, `ZAMES_NONINTERACTIVE_LOGIN=1`) must never block on a modal.
+ */
+export function shouldRunWizard(opts) {
+    if (opts.configExists)
+        return false;
+    if (!opts.isTTY)
+        return false;
+    if (opts.nonInteractiveLogin)
+        return false;
+    if (opts.oneShot)
+        return false;
+    return true;
+}
+/** The step currently shown. */
+export function currentStep(s) {
+    if (s.step === 0)
+        return { kind: 'language' };
+    if (s.step === 1)
+        return { kind: 'provider' };
+    if (s.step === 2 && s.provider && s.needsLogin) {
+        return { kind: 'login', provider: s.provider };
+    }
+    return { kind: 'done' };
+}
+/** Pick the interface language, then move on. */
+export function chooseLanguage(s, locale) {
+    return { ...s, locale, step: 1 };
+}
+/**
+ * Pick a provider. DeepSeek ALWAYS needs a real sign-in; Qwen and GLM can be
+ * tried as a guest, but the wizard says honestly that the guest tier is a few
+ * turns a day (Qwen) and that GLM gates the first send with a captcha.
+ */
+export function chooseProvider(s, provider) {
+    return {
+        ...s,
+        provider,
+        needsLogin: provider === 'deepseek' || provider === 'glm',
+        step: 2,
+    };
+}
+/** The login step finished (or was skipped): the wizard is over. */
+export function finishWizard(s) {
+    return { ...s, step: 3 };
+}
+/** Esc at any step accepts the current defaults (never blocks the first run). */
+export function acceptDefaults(s) {
+    return {
+        locale: s.locale ?? 'en',
+        provider: s.provider ?? 'deepseek',
+        needsLogin: false,
+        step: 3,
+    };
+}
+/** One-line honest note per provider, shown under the choice. */
+export function providerNote(provider) {
+    if (provider === 'deepseek') {
+        return 'DeepSeek needs a real sign-in (a fresh headless login may ask for a captcha in a visible window).';
+    }
+    if (provider === 'qwen') {
+        return 'Qwen works as a guest for a few messages a day; sign in for long tasks.';
+    }
+    return 'GLM gates the first send with a slider captcha: a visible window (--headed) is the practical mode.';
+}