zames_pro 2.96.7 → 2.96.9

package/CHANGELOG.md

@@ -7,6 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.96.9] - 2026-11-06
+
+### Fixed
+
+- **statusline:** a backgrounded child no longer holds the badge until the timeout
+- **resume:** a junk session record is skipped instead of crashing /sessions
+- **model:** a model id with a newline is flattened to one line
+- **context-limit:** a non-finite retry budget gives up instead of retrying forever
+- **spinner:** a dots-only phrase keeps a label instead of going empty
+
+## [2.96.8] - 2026-11-06
+
+### Fixed
+
+- **ui-health:** report a capability listed twice only once
+- **tui:** a throwing store subscriber no longer starves the others
+- **undo:** list(0) returns no rows instead of the whole history
+- **shell:** a cd inside a nested shell is checked by the sandbox
+- **sandbox:** a dangling symlink cannot let a write escape the root
+
 ## [2.96.7] - 2026-11-06
 
 ### Fixed

package/dist/context-limit.js

@@ -9,7 +9,11 @@ export async function recoverFromContextLimit(deps, original) {
         notice(t(keys.giveUp, { provider }));
         return { resend: false, error: original };
     };
-    if (!recover || attempt > maxRetries)
+    // A NON-FINITE budget makes `attempt > maxRetries` false forever (`x > NaN`
+    // is false), so a chat that can never accept another message was
+    // re-compacted on every send with no budget at all. Require a real number.
+    const budget = Number.isFinite(maxRetries) && maxRetries >= 0 ? maxRetries : 0;
+    if (!recover || attempt > budget)
         return giveUp();
     notice(t(keys.compact, { provider }));
     let recovered = false;

package/dist/model-command.js

@@ -12,7 +12,13 @@ export function parseModelIntent(provider, arg, t = translate('en')) {
             message: t('model.unsupported', { provider }),
         };
     }
-    const model = String(arg ?? '').trim();
+    // A model id is a SINGLE token: the operator's text can carry a newline
+    // (a paste, a wrapped line), and it was stored and echoed verbatim — the
+    // newline broke the status line and the `/model set` report into fake
+    // rows. Collapse whitespace; an id is never allowed to contain a break.
+    const model = String(arg ?? '')
+        .replace(/\s+/g, ' ')
+        .trim();
     return model ? { kind: 'set', model } : { kind: 'list' };
 }
 /** The text for an EMPTY model list (a provider that answered with nothing). */

package/dist/resume-command.js

@@ -14,8 +14,13 @@ export function filterSessions(sessions, filter) {
         .toLowerCase();
     if (!q)
         return sessions.slice();
-    return sessions.filter((s) => (s.title || '').toLowerCase().includes(q) ||
-        (s.workdir || '').toLowerCase().includes(q));
+    // Session files are hand-editable and are written by OLDER builds: an array
+    // element can be `null`, and a field can be a number. Reading them blindly
+    // threw a raw TypeError out of `/sessions`.
+    const text = (v) => (typeof v === 'string' ? v : '');
+    return sessions.filter((s) => !!s &&
+        (text(s.title).toLowerCase().includes(q) ||
+            text(s.workdir).toLowerCase().includes(q)));
 }
 /**
  * A chat id only exists on the backend that created it, so opening a session

package/dist/sandbox.js

@@ -12,6 +12,17 @@ function realPathNearest(target) {
     const tail = [];
     while (true) {
         try {
+            // `lstat` does NOT follow the final link: a DANGLING symlink makes
+            // `realpathSync` throw, so the broken link used to fall back to the
+            // LEXICAL path and a write THROUGH it landed at its target OUTSIDE the
+            // sandbox. Read the link itself and resolve its target too.
+            const st = fs.lstatSync(cur);
+            if (st.isSymbolicLink()) {
+                const raw = fs.readlinkSync(cur);
+                const resolvedLink = path.resolve(path.dirname(cur), raw);
+                const realTarget = realPathNearest(resolvedLink);
+                return path.join(realTarget, ...tail.slice().reverse());
+            }
             return path.join(fs.realpathSync(cur), ...tail.slice().reverse());
         }
         catch {

package/dist/shell.js

@@ -30,7 +30,13 @@ export function assertCommandInsideRoot(root, command) {
     // `cd$HOME`, `cd../..` — and runs it as a real directory change. Requiring
     // whitespace skipped those forms, so a glued `cd../..` walked out of the
     // root with the guard never firing.
-    const cdRe = /(?:^|[;&|(\s`])(?:cd|pushd)\s*([^;&|)]+)/gi;
+    // A `cd` inside a nested shell (`sh -c "cd / && ls"`) is executed
+    // exactly like a top-level one, but the static scan saw no separator
+    // before it: the `cd` sits after `-c "`. Treat `-c <quote>` as a
+    // separator too, so the target is checked (and rejected when it leaves
+    // the root). `$(cd …)` / backticks were already covered by `(` and
+    // the backtick.
+    const cdRe = /(?:^|[;&|(\s`]|-[a-z]*c\s*['"])(?:cd|pushd)\s*([^;&|)]+)/gi;
     let m;
     while ((m = cdRe.exec(cmd))) {
         // The shell removes EVERY quote in the word, wherever it sits —

package/dist/spinner.js

@@ -15,7 +15,10 @@ export function randomThinkingPhrase(locale = DEFAULT_LOCALE) {
 }
 // Strip the trailing ellipsis from the phrase — dots are animated separately.
 export function stripEllipsis(phrase) {
-    return phrase.replace(/[.…]+\s*$/, '');
+    const out = phrase.replace(/[.…]+\s*$/, '');
+    // A phrase that is ONLY dots (an odd translation) must not become an EMPTY
+    // label: the spinner would then animate bare dots with no text at all.
+    return out === '' ? phrase.trim() : out;
 }
 // Dot animation shared by BOTH UIs (the ora spinner and the LineEditor): start
 // from an empty string (0 dots), then grow. The width is padded to the maximum

package/dist/statusline.js

@@ -94,6 +94,15 @@ export function runStatusLineCommand(workdir, command, info, timeoutMs = 4000) {
             clearTimeout(timer);
             finish();
         });
+        // A NEWLINE already ends the FIRST line, and that is all the badge shows.
+        // A backgrounded grandchild keeps the pipe OPEN (`my-status &`), so `end`
+        // never fired and the badge waited out the whole timeout on every tick.
+        child.stdout?.on('data', (c) => {
+            if (String(c).includes(String.fromCharCode(10))) {
+                clearTimeout(timer);
+                finish();
+            }
+        });
         child.on('close', () => {
             clearTimeout(timer);
             finish();

package/dist/tui/store.js

@@ -104,7 +104,20 @@ export class TuiStore {
         this.emit();
     }
     emit() {
-        for (const cb of this.listeners)
-            cb();
+        // A subscriber that throws (a React render error, a bug in the status bar)
+        // must not abort the loop: the subscribers AFTER it kept a STALE snapshot,
+        // and the exception escaped into the agent code that only printed a line.
+        // Notify every subscriber, then re-throw the FIRST error so a genuine bug
+        // is still visible where the caller can see it.
+        for (const cb of this.listeners) {
+            try {
+                cb();
+            }
+            catch {
+                // Swallowed ON PURPOSE: a notification sink is a render concern, and
+                // the imperative agent path that printed the line must not crash (and
+                // must not skip the remaining subscribers).
+            }
+        }
     }
 }

package/dist/ui-health.js

@@ -52,6 +52,9 @@ export async function probeUiHealth(page, capabilities = UI_CAPABILITIES) {
     const present = [];
     const missing = [];
     const missingCritical = [];
+    // A capability listed TWICE (two selector chains merged, a copy-paste) was
+    // reported twice, and the `/doctor` row read `input, input`.
+    const seen = new Set();
     for (const spec of capabilities) {
         // A capability with NO selectors cannot be probed at all: the provider does
         // not have that control (z.ai has no toggles). Reporting it as missing made
@@ -59,6 +62,9 @@ export async function probeUiHealth(page, capabilities = UI_CAPABILITIES) {
         // page. It is N/A, not absent.
         if (!spec.selectors || spec.selectors.length === 0)
             continue;
+        if (seen.has(spec.capability))
+            continue;
+        seen.add(spec.capability);
         let found = false;
         for (const sel of spec.selectors) {
             if (await hasAny(page, sel, spec.textRe)) {

package/dist/undo.js

@@ -155,6 +155,10 @@ export class UndoStore {
     }
     async list(count = 10) {
         const history = await this._readIndex();
+        // `slice(-0)` is `slice(0)` — the WHOLE history, so asking for ZERO rows
+        // returned everything. A count below 1 means "no rows".
+        if (!(count > 0))
+            return [];
         return history.slice(-count).reverse();
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zames_pro",
-  "version": "2.96.7",
+  "version": "2.96.9",
   "description": "Terminal coding agent that drives a real browser to chat with DeepSeek, Qwen or GLM — no API key required. Reads and edits files, runs commands, commits to git, like Claude Code / Codex CLI.",
   "type": "module",
   "bin": {