zames_pro 2.90.0 → 2.90.2

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.90.2] - 2026-10-28
+
+### Fixed
+
+- **web:** treat the IPv4-translated ::ffff:0:a.b.c.d literal as private
+
+## [2.90.1] - 2026-10-28
+
+### Fixed
+
+- **tui:** fit the turn rule and agent answers to the pane width, not the terminal
+
 ## [2.90.0] - 2026-10-28
 
 ### Added
@@ -431,7 +443,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- **mcp:** a schema property named __proto__ becomes a real parameter
+- **mcp:** a schema property named **proto** becomes a real parameter
 
 ## [2.82.123] - 2026-10-24
 
@@ -1480,7 +1492,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- **commands:** keep an unsupplied  position as written in a custom command
+- **commands:** keep an unsupplied position as written in a custom command
 - **subagent:** count a subagent run only once it actually starts
 - **attach:** do not cut an inlined @file inside a surrogate pair
 - **checkpoint:** a bare out-of-range rewind index no longer matches a stamp prefix
@@ -1600,7 +1612,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **changelog:** keep drafted group headings on their own line
 - **tui:** decode modified and release wheel reports correctly
 - **shell:** normalize an invalid Bash timeout instead of crashing the tool
-- **cost:** keep per-tool stats safe for __proto__/constructor tool names
+- **cost:** keep per-tool stats safe for **proto**/constructor tool names
 - **tui:** mark blocked/aborted tool calls as errors in the result icon
 - **mcp:** do not split a surrogate pair when truncating an MCP result
 - **context:** discover skills at the documented 3 levels deep

package/dist/tui/TuiEditor.js

@@ -21,8 +21,8 @@ import { TuiApp } from './TuiApp.js';
 import { FullScreenApp } from './FullScreenApp.js';
 import { AttachmentStore } from '../attachments.js';
 import { translate } from '../i18n.js';
-import { expandPastes, formatTokenStatus, tokenStatusLevel, wrapToWidth, truncateToWidth, } from '../input/layout.js';
-import { contentWidth } from '../width.js';
+import { expandPastes, formatTokenStatus, tokenStatusLevel, wrapToWidth, truncateToWidth, screenInnerCols, } from '../input/layout.js';
+import { contentWidth, setContentWidth } from '../width.js';
 import { theme } from '../theme.js';
 import { renderMarkdown } from '../markdown.js';
 import { summarizeToolCall, looksLikeToolError } from '../tool-summary.js';
@@ -257,7 +257,11 @@ export class TuiEditor {
         this.attachments.reset();
         // A turn separator + a BAR-marked, clearly-colored operator message, so an
         // operator turn never blends with the model's answer (operator request).
-        this.printAbove(theme.turnRule('─'.repeat(contentWidth())));
+        // The turn rule must fit the PANE, not the terminal: the root keeps a
+        // gutter on both sides (screenGutter) and Ink wraps a longer line onto a
+        // second row, which looked like a stray line above the message.
+        // `screenInnerCols` ALREADY subtracts the gutter on both sides.
+        this.printAbove(theme.turnRule('─'.repeat(screenInnerCols(process.stdout.columns || 80))));
         // The BAR is a per-row marker, drawn by LogView (entry.bar), so every
         // visual row of a long message starts with `▌` instead of only the first.
         this.store.pushLog('user', wrapToWidth(display, contentWidth() - 2), false, { bar: true });
@@ -484,7 +488,20 @@ export class TuiEditor {
     }
     assistant(msg) {
         this.stop();
-        const rendered = renderMarkdown(msg);
+        // renderMarkdown wraps to width.ts's CONTENT width, which defaults to the
+        // terminal width. Inside the TUI the pane is narrower (the root pads by
+        // the gutter), so an answer wrapped to the terminal width overflowed the
+        // gutter and wrapped again. Point width.ts at the pane for this render.
+        const pane = screenInnerCols(process.stdout.columns || 80);
+        const prev = contentWidth();
+        setContentWidth(pane);
+        let rendered;
+        try {
+            rendered = renderMarkdown(msg);
+        }
+        finally {
+            setContentWidth(prev);
+        }
         this.printAbove('\n' + theme.assistant(translate(this.locale)('editor.answer')));
         this.printAbove(rendered);
         this.printAbove('\n');

package/dist/web.js

@@ -263,6 +263,20 @@ export function isPrivateIp(ip) {
                 '.' +
                 (v6[7] & 0xff));
         }
+        // IPv4-TRANSLATED ::ffff:0:a.b.c.d (RFC 2765): the embedded IPv4 sits in
+        // the LAST two groups with one extra zero group between `ffff` and it.
+        // Only the mapped form above was judged, so `::ffff:0:7f00:1` (= 127.0.0.1)
+        // stayed "public" and WebFetch could reach localhost/metadata through it.
+        const translatedV4 = v6.slice(0, 4).every((g) => g === 0) && v6[4] === 0xffff && v6[5] === 0;
+        if (translatedV4) {
+            return isPrivateIp((v6[6] >> 8) +
+                '.' +
+                (v6[6] & 0xff) +
+                '.' +
+                (v6[7] >> 8) +
+                '.' +
+                (v6[7] & 0xff));
+        }
     }
     if (low === '::1' || low === '::')
         return true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.90.0",
+  "version": "2.90.2",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen or GLM — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {