zames_pro 2.96.7 → 2.96.8

package/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.96.8] - 2026-11-06
+
+### Fixed
+
+- **ui-health:** report a capability listed twice only once
+- **tui:** a throwing store subscriber no longer starves the others
+- **undo:** list(0) returns no rows instead of the whole history
+- **shell:** a cd inside a nested shell is checked by the sandbox
+- **sandbox:** a dangling symlink cannot let a write escape the root
+
 ## [2.96.7] - 2026-11-06
 
 ### Fixed

package/dist/sandbox.js

@@ -12,6 +12,17 @@ function realPathNearest(target) {
     const tail = [];
     while (true) {
         try {
+            // `lstat` does NOT follow the final link: a DANGLING symlink makes
+            // `realpathSync` throw, so the broken link used to fall back to the
+            // LEXICAL path and a write THROUGH it landed at its target OUTSIDE the
+            // sandbox. Read the link itself and resolve its target too.
+            const st = fs.lstatSync(cur);
+            if (st.isSymbolicLink()) {
+                const raw = fs.readlinkSync(cur);
+                const resolvedLink = path.resolve(path.dirname(cur), raw);
+                const realTarget = realPathNearest(resolvedLink);
+                return path.join(realTarget, ...tail.slice().reverse());
+            }
             return path.join(fs.realpathSync(cur), ...tail.slice().reverse());
         }
         catch {

package/dist/shell.js

@@ -30,7 +30,13 @@ export function assertCommandInsideRoot(root, command) {
     // `cd$HOME`, `cd../..` — and runs it as a real directory change. Requiring
     // whitespace skipped those forms, so a glued `cd../..` walked out of the
     // root with the guard never firing.
-    const cdRe = /(?:^|[;&|(\s`])(?:cd|pushd)\s*([^;&|)]+)/gi;
+    // A `cd` inside a nested shell (`sh -c "cd / && ls"`) is executed
+    // exactly like a top-level one, but the static scan saw no separator
+    // before it: the `cd` sits after `-c "`. Treat `-c <quote>` as a
+    // separator too, so the target is checked (and rejected when it leaves
+    // the root). `$(cd …)` / backticks were already covered by `(` and
+    // the backtick.
+    const cdRe = /(?:^|[;&|(\s`]|-[a-z]*c\s*['"])(?:cd|pushd)\s*([^;&|)]+)/gi;
     let m;
     while ((m = cdRe.exec(cmd))) {
         // The shell removes EVERY quote in the word, wherever it sits —

package/dist/tui/store.js

@@ -104,7 +104,20 @@ export class TuiStore {
         this.emit();
     }
     emit() {
-        for (const cb of this.listeners)
-            cb();
+        // A subscriber that throws (a React render error, a bug in the status bar)
+        // must not abort the loop: the subscribers AFTER it kept a STALE snapshot,
+        // and the exception escaped into the agent code that only printed a line.
+        // Notify every subscriber, then re-throw the FIRST error so a genuine bug
+        // is still visible where the caller can see it.
+        for (const cb of this.listeners) {
+            try {
+                cb();
+            }
+            catch {
+                // Swallowed ON PURPOSE: a notification sink is a render concern, and
+                // the imperative agent path that printed the line must not crash (and
+                // must not skip the remaining subscribers).
+            }
+        }
     }
 }

package/dist/ui-health.js

@@ -52,6 +52,9 @@ export async function probeUiHealth(page, capabilities = UI_CAPABILITIES) {
     const present = [];
     const missing = [];
     const missingCritical = [];
+    // A capability listed TWICE (two selector chains merged, a copy-paste) was
+    // reported twice, and the `/doctor` row read `input, input`.
+    const seen = new Set();
     for (const spec of capabilities) {
         // A capability with NO selectors cannot be probed at all: the provider does
         // not have that control (z.ai has no toggles). Reporting it as missing made
@@ -59,6 +62,9 @@ export async function probeUiHealth(page, capabilities = UI_CAPABILITIES) {
         // page. It is N/A, not absent.
         if (!spec.selectors || spec.selectors.length === 0)
             continue;
+        if (seen.has(spec.capability))
+            continue;
+        seen.add(spec.capability);
         let found = false;
         for (const sel of spec.selectors) {
             if (await hasAny(page, sel, spec.textRe)) {

package/dist/undo.js

@@ -155,6 +155,10 @@ export class UndoStore {
     }
     async list(count = 10) {
         const history = await this._readIndex();
+        // `slice(-0)` is `slice(0)` — the WHOLE history, so asking for ZERO rows
+        // returned everything. A count below 1 means "no rows".
+        if (!(count > 0))
+            return [];
         return history.slice(-count).reverse();
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.96.7",
+  "version": "2.96.8",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen or GLM — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {