zames_pro 2.90.14 → 2.90.16

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.90.16] - 2026-10-29
+
+### Fixed
+
+- **browser:** apply the sanitized headless UA to the relaunch explicitly
+
+## [2.90.15] - 2026-10-29
+
+### Changed
+
+- test(browser): pin the headless user-agent sanitizer contract
+
 ## [2.90.14] - 2026-10-29
 
 ### Fixed

package/dist/browser-pure.js

@@ -383,3 +383,19 @@ export async function nukeProfile(dir = USER_DATA_DIR) {
     }
     catch { }
 }
+/**
+ * PURE: does this browser still need the headless User-Agent fix?
+ *
+ * `_fixHeadlessUserAgent()` bails out for an "already configured" UA — but
+ * using `if (this.userAgent) return` was wrong: the field is also the ENGINE's
+ * own UA captured from the page, and a config UA that merely CONTAINS the
+ * `HeadlessChrome` marker needs the fix just as much. The only value that can
+ * skip the fix is one that is already sanitized (and non-empty — an empty
+ * string means "ask the engine", not "use a blank UA").
+ */
+export function needsHeadlessUaFix(ua) {
+    const value = String(ua ?? '');
+    if (!value)
+        return true;
+    return sanitizeHeadlessUA(value) !== value;
+}

package/dist/browser.js

@@ -23,7 +23,7 @@ export { STOP_NAME_RE, CONTINUE_NAME_RE };
 // imported for the class below and RE-EXPORTED here, so the public API of this
 // module is unchanged (tests and other modules import these names from
 // './browser.js').
-import { askPassword, USER_DATA_DIR, parseHeadlessUACache, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, headlessUACacheReady, sanitizeHeadlessUA, writeAuthMarker, isGenerationIncompleteText, isRateLimitText, isServerBusyText, isContextLimitText, normText, cleanAnswer, RateLimitError, ServerBusyError, GenerationIncompleteError, ContextLimitError, cleanSingletonFiles, profileLooksLocked, nukeProfile, } from './browser-pure.js';
+import { askPassword, USER_DATA_DIR, parseHeadlessUACache, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, headlessUACacheReady, sanitizeHeadlessUA, needsHeadlessUaFix, writeAuthMarker, isGenerationIncompleteText, isRateLimitText, isServerBusyText, isContextLimitText, normText, cleanAnswer, RateLimitError, ServerBusyError, GenerationIncompleteError, ContextLimitError, cleanSingletonFiles, profileLooksLocked, nukeProfile, } from './browser-pure.js';
 export { askPassword, parseHeadlessUACache, headlessUACacheReady, sanitizeHeadlessUA, isGenerationIncompleteText, isRateLimitText, isServerBusyText, isContextLimitText, normText, RateLimitError, ServerBusyError, GenerationIncompleteError, ContextLimitError, };
 export class DeepSeekBrowser {
     providerName = 'deepseek';
@@ -330,6 +330,12 @@ export class DeepSeekBrowser {
     async _fixHeadlessUserAgent() {
         if (!this.headless)
             return;
+        // An already-sanitized UA (from the cache or a previous fix) needs no
+        // relaunch; an EMPTY field or a config UA that still carries the marker
+        // must be fixed, which the old blanket `if (this.userAgent) return` skipped
+        // on Qwen/GLM.
+        if (!needsHeadlessUaFix(this.userAgent))
+            return;
         try {
             const ua = await this.page.evaluate(readUserAgentInDom);
             const fixed = sanitizeHeadlessUA(ua);
@@ -338,18 +344,28 @@ export class DeepSeekBrowser {
             this.userAgent = fixed;
             // Remember the good UA for this engine build so the NEXT headless start
             // uses it immediately (no relaunch). Keyed by executable path.
-            void writeCachedHeadlessUA(headlessEngineKey(), fixed);
+            await writeCachedHeadlessUA(headlessEngineKey(), fixed);
             if (this.debug)
                 console.error('profile: headless UA -> relaunching with a plain Chrome UA');
             await this.context.close().catch(() => { });
-            await this._launchOnce();
+            // Pass the UA EXPLICITLY: it was just sanitized, and relying on the field
+            // meant the relaunch could read the page's own UA back and keep the
+            // HeadlessChrome marker (a 403 / login wall from DeepSeek's CDN).
+            await this._launchOnce(fixed);
         }
         catch (e) {
             if (this.debug)
                 console.error('profile: UA fix failed:', e.message);
         }
     }
-    async _launchOnce() {
+    /**
+     * Launch the persistent context. `uaOverride` applies a User-Agent to THIS
+     * launch without storing it first: the UA fix reads the engine UA from the
+     * page it is about to close, so passing the value explicitly is the only way
+     * the relaunch cannot fall back to the un-sanitized UA (a stored field was
+     * read by the OLD page and then re-read by the new one).
+     */
+    async _launchOnce(uaOverride) {
         const options = {
             headless: this.headless,
             // 30ms slowMo per Playwright action added up over thousands of DOM
@@ -360,8 +376,9 @@ export class DeepSeekBrowser {
         };
         if (this.channel)
             options.channel = this.channel;
-        if (this.userAgent)
-            options.userAgent = this.userAgent;
+        const ua = uaOverride || this.userAgent;
+        if (ua)
+            options.userAgent = ua;
         try {
             this.context = await chromium.launchPersistentContext(USER_DATA_DIR, options);
         }

package/dist/glm-browser.js

@@ -26,7 +26,7 @@ import { recoverFromContextLimit } from './context-limit.js';
 import { awaitUploadPreview, readAttachBuffers } from './attach-flow.js';
 import { theme } from './theme.js';
 import { scrapeGlmChatList, scrapeGlmChatMessages, parseGlmChatList, parseGlmHistory, } from './glm-chats.js';
-import { cleanAnswer, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, sanitizeHeadlessUA, cleanSingletonFiles, profileLooksLocked, nukeProfile, writeAuthMarker, } from './browser-pure.js';
+import { cleanAnswer, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, sanitizeHeadlessUA, needsHeadlessUaFix, cleanSingletonFiles, profileLooksLocked, nukeProfile, writeAuthMarker, } from './browser-pure.js';
 import { readLastAnswerInDom, readPageToastsInDom, readUserAgentInDom, readInputTrimmedTextInDom, isElementEnabledInDom, setBusyTitleInDom, chatSignalInDom, } from './browser-dom.js';
 import { probeUiHealth, } from './ui-health.js';
 import { CHAT_URL, LOGIN_URL, CHAT_ID_RE, chatUrl, INPUT_SELECTORS, UPLOAD_BUTTON_SELECTOR, SEND_SELECTORS, STOP_SELECTORS, STOP_NAME_RE, NEW_CHAT_SELECTOR, MODELS_URL, MODEL_TRIGGER_SELECTOR, modelIdFromTriggerId, CHAT_LIST_URL, chatHistoryUrl, AUTH_URL, ANSWER_URL_RE, ANSWER_SELECTORS, THINK_CLASS_RE, MESSAGE_CONTAINER_SELECTORS, USER_CLASS_RE, CHAT_SIGNAL_NODES_SELECTOR, MARKDOWN_SELECTOR, } from './glm-ui.js';
@@ -261,7 +261,8 @@ export class GlmBrowser {
     async _fixHeadlessUserAgent() {
         if (!this.headless)
             return;
-        if (this.userAgent)
+        // See QwenBrowser: only an ALREADY sanitized UA means "nothing to fix".
+        if (!needsHeadlessUaFix(this.userAgent))
             return;
         try {
             const ua = await this.page.evaluate(readUserAgentInDom);
@@ -269,18 +270,18 @@ export class GlmBrowser {
             if (fixed === ua)
                 return;
             this.userAgent = fixed;
-            void writeCachedHeadlessUA(headlessEngineKey(), fixed);
+            await writeCachedHeadlessUA(headlessEngineKey(), fixed);
             if (this.debug)
                 console.error('glm profile: headless UA -> relaunching plain Chrome UA');
             await this.context.close().catch(() => { });
-            await this._launchOnce();
+            await this._launchOnce(fixed);
         }
         catch (e) {
             if (this.debug)
                 console.error('glm profile: UA fix failed:', e.message);
         }
     }
-    async _launchOnce() {
+    async _launchOnce(uaOverride) {
         const options = {
             headless: this.headless,
             slowMo: 10,
@@ -288,8 +289,9 @@ export class GlmBrowser {
         };
         if (this.channel)
             options.channel = this.channel;
-        if (this.userAgent)
-            options.userAgent = this.userAgent;
+        const ua = uaOverride || this.userAgent;
+        if (ua)
+            options.userAgent = ua;
         try {
             this.context = await chromium.launchPersistentContext(GLM_USER_DATA_DIR, options);
         }

package/dist/qwen-browser.js

@@ -27,7 +27,7 @@ import { awaitUploadPreview, readAttachBuffers } from './attach-flow.js';
 import { theme } from './theme.js';
 import { recoverFromContextLimit } from './context-limit.js';
 import { scrapeQwenChatList, scrapeQwenChatMessages, parseQwenChatList, parseQwenHistory, } from './qwen-chats.js';
-import { cleanAnswer, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, sanitizeHeadlessUA, cleanSingletonFiles, profileLooksLocked, nukeProfile, writeAuthMarker, } from './browser-pure.js';
+import { cleanAnswer, headlessEngineKey, readCachedHeadlessUA, writeCachedHeadlessUA, sanitizeHeadlessUA, needsHeadlessUaFix, cleanSingletonFiles, profileLooksLocked, nukeProfile, writeAuthMarker, } from './browser-pure.js';
 import { chatSignalInDom, dumpDomCountsInDom, isElementEnabledInDom, readInputTrimmedTextInDom, readLastAnswerInDom, readPageToastsInDom, readUserAgentInDom, setBusyTitleInDom, clickStopInDom, stopButtonVisibleInDom, } from './browser-dom.js';
 import { probeUiHealth, } from './ui-health.js';
 import { CHAT_URL, CHAT_ID_RE, chatUrl, INPUT_SELECTORS, SEND_SELECTORS, STOP_SELECTORS, STOP_NAME_RE, NEW_CHAT_SELECTOR, MODEL_TRIGGER_SELECTOR, MODELS_URL, CHAT_LIST_URL, chatHistoryUrl, AGE_GATE_MODAL, AGE_GATE_CONTINUE, AGE_GATE_YEAR_SELECT, AGE_GATE_YEAR_OPTION, COOKIE_ACCEPT_RE, ATTACH_SELECTORS, ATTACH_MENU_TRIGGER, ATTACH_MENU_ITEM_RE, THINKING_SELECTOR, THINKING_MODE_RE, FAST_MODE_RE, WEB_SEARCH_MENU_RE, ANSWER_SELECTORS, THINK_CLASS_RE, MESSAGE_CONTAINER_SELECTORS, ASSISTANT_CLASS_RE, CHAT_SIGNAL_NODES_SELECTOR, MARKDOWN_SELECTOR, TOGGLE_SELECTORS, } from './qwen-ui.js';
@@ -264,7 +264,12 @@ export class QwenBrowser {
     async _fixHeadlessUserAgent() {
         if (!this.headless)
             return;
-        if (this.userAgent)
+        // A UA that is ALREADY sanitized came from the cache; there is nothing to
+        // fix and nothing to relaunch for. Any other value (including an empty
+        // one) is the engine's own UA, which may still carry the marker — the old
+        // blanket `if (this.userAgent) return` skipped the fix for exactly that
+        // case, leaving `HeadlessChrome` in the live browser.
+        if (!needsHeadlessUaFix(this.userAgent))
             return;
         try {
             const ua = await this.page.evaluate(readUserAgentInDom);
@@ -272,18 +277,20 @@ export class QwenBrowser {
             if (fixed === ua)
                 return;
             this.userAgent = fixed;
-            void writeCachedHeadlessUA(headlessEngineKey(), fixed);
+            await writeCachedHeadlessUA(headlessEngineKey(), fixed);
             if (this.debug)
                 console.error('qwen profile: headless UA -> relaunching plain Chrome UA');
             await this.context.close().catch(() => { });
-            await this._launchOnce();
+            // Apply the UA to THIS launch explicitly: re-reading it from the fresh
+            // page would keep the marker the fix exists to remove.
+            await this._launchOnce(fixed);
         }
         catch (e) {
             if (this.debug)
                 console.error('qwen profile: UA fix failed:', e.message);
         }
     }
-    async _launchOnce() {
+    async _launchOnce(uaOverride) {
         const options = {
             headless: this.headless,
             slowMo: 10,
@@ -291,8 +298,9 @@ export class QwenBrowser {
         };
         if (this.channel)
             options.channel = this.channel;
-        if (this.userAgent)
-            options.userAgent = this.userAgent;
+        const ua = uaOverride || this.userAgent;
+        if (ua)
+            options.userAgent = ua;
         try {
             this.context = await chromium.launchPersistentContext(QWEN_USER_DATA_DIR, options);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.90.14",
+  "version": "2.90.16",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen or GLM — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {